GMER 2.0.18444 - http://www.gmer.net Rootkit scan 2013-01-14 20:47:55 Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 FUJITSU_ rev.0040 232,89GB Running: liexismm.exe; Driver: C:\DOCUME~1\Agatka\USTAWI~1\Temp\ugtdrpow.sys ---- System - GMER 2.0 ---- SSDT \??\C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies) ZwQueryValueKey [0xA55671EA] ---- Kernel code sections - GMER 2.0 ---- .text ntkrnlpa.exe!ZwCallbackReturn + 2EA0 80504798 4 Bytes [EA, 71, 56, A5] ---- User code sections - GMER 2.0 ---- .text C:\Program Files\TortoiseSVN\bin\TSVNCache.exe[3964] kernel32.dll!SetUnhandledExceptionFilter + 2 7C8449CF 5 Bytes [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4} ---- Files - GMER 2.0 ---- File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\Wtórnik Go³aszewski 0 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.dwg 22817 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.RLD 90 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.TAB 349 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.TAF 262 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.TFW 222 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.tif 336242 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.dwg 22815 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.RLD 90 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.TAB 349 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.TAF 262 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.TFW 222 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\mapa.tif 343740 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\caly.dwg 33444 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\caly.tif 114772 bytes File C:\Documents and Settings\Agatka\Pulpit\Nieu¿ywane skróty pulpitu\Thumbs.db 4608 bytes ---- EOF - GMER 2.0 ----