GMER 1.0.15.15572 - http://www.gmer.net
Rootkit scan 2011-04-30 11:08:53
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 FUJITSU_MHV2100BH rev.892C
Running: gmer.exe; Driver: C:\DOCUME~1\Bogdan\USTAWI~1\Temp\pxtdqpow.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwAssignProcessToJobObject [0xA74B6610]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwDebugActiveProcess [0xA74B6C10]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwDuplicateObject [0xA74B6730]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwOpenProcess [0xA74B64B0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwOpenThread [0xA74B6570]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwProtectVirtualMemory [0xA74B66D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwQueueApcThread [0xA74B6790]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSetContextThread [0xA74B6690]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSetInformationThread [0xA74B6650]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSetSecurityObject [0xA74B67D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSuspendProcess [0xA74B6510]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSuspendThread [0xA74B6590]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwTerminateProcess [0xA74B64D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwTerminateThread [0xA74B65D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwWriteVirtualMemory [0xA74B6750]

---- User code sections - GMER 1.0.15 ----

.text           C:\WINDOWS\system32\SearchIndexer.exe[220] kernel32.dll!WriteFile                                  7C810E27 7 Bytes  JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation)
.text           D:\Program Files\Mozilla Firefox\firefox.exe[916] ntdll.dll!LdrLoadDll                             7C91632D 5 Bytes  JMP 00401410 D:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
.text           D:\Program Files\ESET\ESET Smart Security\ekrn.exe[1964] kernel32.dll!SetUnhandledExceptionFilter  7C84495D 4 Bytes  [C2, 04, 00, 00]
.text           D:\Program Files\Mozilla Firefox\plugin-container.exe[2392] USER32.dll!SetWindowLongA              7E37C29D 5 Bytes  JMP 10699777 D:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           D:\Program Files\Mozilla Firefox\plugin-container.exe[2392] USER32.dll!SetWindowLongW              7E37C2BB 5 Bytes  JMP 10699709 D:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           D:\Program Files\Mozilla Firefox\plugin-container.exe[2392] USER32.dll!GetWindowInfo               7E37C49C 5 Bytes  JMP 104C7C37 D:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           D:\Program Files\Mozilla Firefox\plugin-container.exe[2392] USER32.dll!TrackPopupMenu              7E3B531E 5 Bytes  JMP 104C823A D:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                             eamon.sys (Amon monitor/ESET)
AttachedDevice  \Driver\Tcpip \Device\Ip                                                                           epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice  \Driver\Kbdclass \Device\KeyboardClass0                                                            SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice  \Driver\Kbdclass \Device\KeyboardClass1                                                            SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                          epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                          epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                        epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)

---- EOF - GMER 1.0.15 ----