GMER 2.1.19322 - http://www.gmer.net
Rootkit quick scan 2014-01-17 16:57:05
Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4 WDC_WD5000AUDX-63WNHY0 rev.01.01A01 465,76GB
Running: gmer.exe; Driver: D:\DOCUME~1\smo\USTAWI~1\Temp\pfldqpog.sys


---- System - GMER 2.1 ----

SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys     ZwEnumerateKey [0xABF5C82A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys     ZwEnumerateValueKey [0xABF5CA80]

Code            B86EAC9C                                      ZwRequestPort
Code            B86EAD3C                                      ZwRequestWaitReplyPort
Code            B86EABFC                                      ZwTraceEvent
Code            B86EAC9B                                      NtRequestPort
Code            B86EAD3B                                      NtRequestWaitReplyPort
Code            B86EABFB                                      NtTraceEvent

---- Devices - GMER 2.1 ----

Device          \Driver\atapi \Device\Ide\IdePort0            [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4   [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdePort1            [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdePort2            [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c   [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdePort3            [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdeDeviceP3T1L0-2b  [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18  [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-36  [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20  [B7DE6B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device                                                        8AC031E8
Device                                                        Ntfs.sys
Device                                                        880FA1E8
Device                                                        Fastfat.SYS

AttachedDevice  \Driver\Tcpip \Device\Ip                      cmdhlp.sys
AttachedDevice  \Driver\Tcpip \Device\Tcp                     cmdhlp.sys
AttachedDevice  \Driver\Tcpip \Device\Udp                     cmdhlp.sys
AttachedDevice  \Driver\Tcpip \Device\RawIp                   cmdhlp.sys

---- EOF - GMER 2.1 ----