GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-03-24 13:19:27 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 WDC_WD5000AAKS-00A7B0 rev.01.03B01 465,76GB Running: n238qy1f.exe; Driver: C:\Users\dut\AppData\Local\Temp\uxriqpow.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1964] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076a21465 2 bytes [A2, 76] .text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1964] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076a214bb 2 bytes [A2, 76] .text ... * 2 ---- Processes - GMER 2.1 ---- Process C:\Users\dut\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y2UQQXXB\n238qy1f.exe (*** suspicious ***) @ C:\Users\dut\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y2UQQXXB\n238qy1f.exe [828](2014-03-24 10:00:17) 0000000000400000 ---- EOF - GMER 2.1 ----