GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-01-13 15:24:14
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\0000002e ST500LM012_HN-M500MBB rev.2AR10002 465,76GB
Running: gmer.exe; Driver: C:\Users\Piotr\AppData\Local\Temp\uxldqpod.sys


---- Kernel code sections - GMER 2.1 ----

.text   C:\WINDOWS\System32\win32k.sys!W32pServiceTable                                                                fffff960001e3700 15 bytes [40, B5, F7, 01, 80, 39, 70, ...]
.text   C:\WINDOWS\System32\win32k.sys!W32pServiceTable + 16                                                           fffff960001e3710 11 bytes [00, 15, FC, FF, 00, 27, C3, ...]

---- User code sections - GMER 2.1 ----

.text   C:\Program Files\Windows Defender\MsMpEng.exe[1816] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506     00007ffd310a169a 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Windows Defender\MsMpEng.exe[1816] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514     00007ffd310a16a2 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Windows Defender\MsMpEng.exe[1816] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118        00007ffd310a181a 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Windows Defender\MsMpEng.exe[1816] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142        00007ffd310a1832 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1636] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506     00007ffd310a169a 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1636] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514     00007ffd310a16a2 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1636] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118        00007ffd310a181a 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1636] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142        00007ffd310a1832 4 bytes [0A, 31, FD, 7F]
.text   C:\Windows\System32\igfxpers.exe[3420] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                  00007ffd310a169a 4 bytes [0A, 31, FD, 7F]
.text   C:\Windows\System32\igfxpers.exe[3420] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                  00007ffd310a16a2 4 bytes [0A, 31, FD, 7F]
.text   C:\Windows\System32\igfxpers.exe[3420] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                     00007ffd310a181a 4 bytes [0A, 31, FD, 7F]
.text   C:\Windows\System32\igfxpers.exe[3420] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                     00007ffd310a1832 4 bytes [0A, 31, FD, 7F]
.text   C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[4092] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506  00007ffd310a169a 4 bytes [0A, 31, FD, 7F]
.text   C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[4092] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514  00007ffd310a16a2 4 bytes [0A, 31, FD, 7F]
.text   C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[4092] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118     00007ffd310a181a 4 bytes [0A, 31, FD, 7F]
.text   C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[4092] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142     00007ffd310a1832 4 bytes [0A, 31, FD, 7F]
.text   C:\Program Files\Windows Media Player\wmpnetwk.exe[4384] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194      00007ffd22ce1f6a 4 bytes [CE, 22, FD, 7F]
.text   C:\Program Files\Windows Media Player\wmpnetwk.exe[4384] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218      00007ffd22ce1f82 4 bytes [CE, 22, FD, 7F]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [524:540]                                                                        fffff96000808b90

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                          unknown MBR code

---- EOF - GMER 2.1 ----