GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2013-09-18 19:23:21
Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\0000005b WDC_WD2500JS-08NCB1 rev.10.02E01 232,88GB
Running: 0m5mierm.exe; Driver: C:\DOCUME~1\JARECKI\USTAWI~1\Temp\kftdypod.sys


---- Kernel code sections - GMER 2.1 ----

.text  C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                             section is writeable [0xB95D5380, 0x2FF527, 0xE8000020]

---- User code sections - GMER 2.1 ----

.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtCreateFile + 6               7C90D0B4 4 Bytes  [28, 98, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtCreateFile + B               7C90D0B9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtMapViewOfSection + 6         7C90D524 4 Bytes  [28, 9B, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtMapViewOfSection + B         7C90D529 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenFile + 6                 7C90D5A4 4 Bytes  [68, 98, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenFile + B                 7C90D5A9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenProcess + 6              7C90D604 4 Bytes  [A8, 99, 8C, 00] {TEST AL, 0x99; MOV [EAX], ES}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenProcess + B              7C90D609 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenProcessToken + 6         7C90D614 4 Bytes  CALL 7B9162B2 
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenProcessToken + B         7C90D619 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenProcessTokenEx + 6       7C90D624 4 Bytes  [A8, 9A, 8C, 00] {TEST AL, 0x9a; MOV [EAX], ES}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenProcessTokenEx + B       7C90D629 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenThread + 6               7C90D664 4 Bytes  [68, 99, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenThread + B               7C90D669 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenThreadToken + 6          7C90D674 4 Bytes  [68, 9A, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenThreadToken + B          7C90D679 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenThreadTokenEx + 6        7C90D684 4 Bytes  CALL 7B916323 
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtOpenThreadTokenEx + B        7C90D689 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtQueryAttributesFile + 6      7C90D714 4 Bytes  [A8, 98, 8C, 00] {TEST AL, 0x98; MOV [EAX], ES}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtQueryAttributesFile + B      7C90D719 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtQueryFullAttributesFile + 6  7C90D7B4 4 Bytes  CALL 7B916451 
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtQueryFullAttributesFile + B  7C90D7B9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtSetInformationFile + 6       7C90DC64 4 Bytes  [28, 99, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtSetInformationFile + B       7C90DC69 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtSetInformationThread + 6     7C90DCB4 4 Bytes  [28, 9A, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtSetInformationThread + B     7C90DCB9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtUnmapViewOfSection + 6       7C90DF14 4 Bytes  [68, 9B, 8C, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[2536] ntdll.dll!NtUnmapViewOfSection + B       7C90DF19 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtCreateFile + 6               7C90D0B4 4 Bytes  [28, 58, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtCreateFile + B               7C90D0B9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtMapViewOfSection + 6         7C90D524 4 Bytes  [28, 5B, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtMapViewOfSection + B         7C90D529 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenFile + 6                 7C90D5A4 4 Bytes  [68, 58, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenFile + B                 7C90D5A9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenProcess + 6              7C90D604 4 Bytes  [A8, 59, B3, 00] {TEST AL, 0x59; MOV BL, 0x0}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenProcess + B              7C90D609 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenProcessToken + 6         7C90D614 4 Bytes  CALL 7B918972 
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenProcessToken + B         7C90D619 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenProcessTokenEx + 6       7C90D624 4 Bytes  [A8, 5A, B3, 00] {TEST AL, 0x5a; MOV BL, 0x0}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenProcessTokenEx + B       7C90D629 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenThread + 6               7C90D664 4 Bytes  [68, 59, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenThread + B               7C90D669 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenThreadToken + 6          7C90D674 4 Bytes  [68, 5A, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenThreadToken + B          7C90D679 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenThreadTokenEx + 6        7C90D684 4 Bytes  CALL 7B9189E3 
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtOpenThreadTokenEx + B        7C90D689 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtQueryAttributesFile + 6      7C90D714 4 Bytes  [A8, 58, B3, 00] {TEST AL, 0x58; MOV BL, 0x0}
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtQueryAttributesFile + B      7C90D719 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtQueryFullAttributesFile + 6  7C90D7B4 4 Bytes  CALL 7B918B11 
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtQueryFullAttributesFile + B  7C90D7B9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtSetInformationFile + 6       7C90DC64 4 Bytes  [28, 59, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtSetInformationFile + B       7C90DC69 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtSetInformationThread + 6     7C90DCB4 4 Bytes  [28, 5A, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtSetInformationThread + B     7C90DCB9 1 Byte  [E2]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtUnmapViewOfSection + 6       7C90DF14 4 Bytes  [68, 5B, B3, 00]
.text  C:\Program Files\Google\Chrome\Application\chrome.exe[3028] ntdll.dll!NtUnmapViewOfSection + B       7C90DF19 1 Byte  [E2]

---- EOF - GMER 2.1 ----