GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-07-08 19:39:03
Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path1Target1Lun0 ST350041 rev.JC45 465,76GB
Running: 6ow8dmeb.exe; Driver: C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\pgliqpoc.sys


---- System - GMER 2.1 ----

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwNotifyChangeKey [0xA768B5D0]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwNotifyChangeMultipleKeys [0xA768B700]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwOpenProcess [0xA768B010]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwSuspendProcess [0xA768B300]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwSuspendThread [0xA768B3E0]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwTerminateProcess [0xA768B120]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwTerminateThread [0xA768B210]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                          ZwWriteVirtualMemory [0xA768B4D0]

---- Kernel code sections - GMER 2.1 ----

.text           C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                              section is writeable [0xB68543C0, 0x843B7A, 0xE8000020]

---- User code sections - GMER 2.1 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtCreateFile                             7C90D090 5 Bytes  JMP 018BB8D0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtFlushBuffersFile                       7C90D310 5 Bytes  JMP 018B7B07 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtQueryFullAttributesFile                7C90D790 5 Bytes  JMP 018B7820 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtReadFile                               7C90D9B0 5 Bytes  JMP 018B7A00 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtReadFileScatter                        7C90D9C0 5 Bytes  JMP 0210CCC0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtWriteFile                              7C90DF60 5 Bytes  JMP 018BBFE0 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!NtWriteFileGather                        7C90DF70 5 Bytes  JMP 0210CC6F C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] ntdll.dll!LdrLoadDll                               7C9163A3 5 Bytes  JMP 10001EAE C:\Program Files\Mozilla Firefox\mozglue.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] kernel32.dll!lstrlenW + 43                         7C809ADC 7 Bytes  JMP 020D9E88 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] kernel32.dll!MapViewOfFileEx + 6A                  7C80B990 7 Bytes  JMP 020D9E65 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] kernel32.dll!ValidateLocale + B1E8                 7C8449F8 7 Bytes  JMP 018B8236 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] GDI32.dll!SetDIBitsToDevice + 209                  77F19E04 7 Bytes  JMP 020D9DE6 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3424] USER32.dll!GetWindowInfo                           7E37C49C 5 Bytes  JMP 01FE7585 C:\Program Files\Mozilla Firefox\xul.dll

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\Tcpip \Device\Ip                                                                              avgtdix.sys
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                             avgtdix.sys
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                             avgtdix.sys
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                           avgtdix.sys
AttachedDevice  \FileSystem\Fastfat \Fat                                                                              fltmgr.sys

---- Registry - GMER 2.1 ----

Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                       C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                       0x00 0x00 0x00 0x00 ...

---- EOF - GMER 2.1 ----