GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-03-12 11:52:18 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP4T0L0-4 rev. 0,00MB Running: iz10sqgg.exe; Driver: C:\Users\Torbacz\AppData\Local\Temp\fwryruod.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002bf1000 45 bytes [00, 00, 16, 02, 4E, 74, 66, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80002bf102f 29 bytes [00, 01, 00, 06, 00, 00, 00, ...] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[1916] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075241465 2 bytes [24, 75] .text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[1916] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000752414bb 2 bytes [24, 75] .text ... * 2 .text C:\Program Files (x86)\AVG\AVG2014\avgui.exe[4368] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075241465 2 bytes [24, 75] .text C:\Program Files (x86)\AVG\AVG2014\avgui.exe[4368] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000752414bb 2 bytes [24, 75] .text ... * 2 ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk0\DR0 sector 0: rootkit-like behavior ---- EOF - GMER 2.1 ----