GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-01-27 19:21:22
Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e SAMSUNG_SP2504C rev.VT100-41 232,89GB
Running: 33mkb8o1.exe; Driver: C:\DOCUME~1\Grzegorz\USTAWI~1\Temp\kwwdqfog.sys


---- Kernel code sections - GMER 2.1 ----

.text           C:\WINDOWS\system32\DRIVERS\ati2mtag.sys                                                                          section is writeable [0xF6DA3000, 0x288B98, 0xE8000020]
?               C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys                                                                     Nie można odnaleźć określonego pliku. !

---- User code sections - GMER 2.1 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtCreateFile                                         7C90D0AE 5 Bytes  JMP 01146F30 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtFlushBuffersFile                                   7C90D32E 5 Bytes  JMP 01146C38 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtQueryFullAttributesFile                            7C90D7AE 5 Bytes  JMP 01146CED C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtReadFile                                           7C90D9CE 5 Bytes  JMP 01146DFA C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtReadFileScatter                                    7C90D9DE 5 Bytes  JMP 0159A6AD C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtWriteFile                                          7C90DF7E 5 Bytes  JMP 011470D4 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!NtWriteFileGather                                    7C90DF8E 5 Bytes  JMP 0159A6FD C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] ntdll.dll!LdrLoadDll                                           7C91632D 5 Bytes  JMP 10009AD2 C:\Program Files\Mozilla Firefox\mozglue.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] kernel32.dll!lstrlenW + 43                                     7C809AEC 7 Bytes  JMP 0158714D C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] kernel32.dll!MapViewOfFileEx + 6A                              7C80B9A0 7 Bytes  JMP 015859F3 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] kernel32.dll!ValidateLocale + B648                             7C844EE0 7 Bytes  JMP 0133C377 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] GDI32.dll!SetDIBitsToDevice + 20A                              77F19E14 7 Bytes  JMP 015841BB C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2364] USER32.dll!GetWindowInfo                                       7E37C49C 5 Bytes  JMP 0203E6D1 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[2560] USER32.dll!DefWindowProcA + 11A                       7E37C298 7 Bytes  JMP 01E7676C C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[2560] USER32.dll!SetWindowLongA + 19                        7E37C2B6 7 Bytes  JMP 01E7683E C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[2560] USER32.dll!GetWindowInfo                              7E37C49C 5 Bytes  JMP 01E78AEE C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[2560] USER32.dll!GetMenuContextHelpId + 1A                  7E3B5319 7 Bytes  JMP 01E77106 C:\Program Files\Mozilla Firefox\xul.dll

---- Devices - GMER 2.1 ----

AttachedDevice  \FileSystem\Fastfat \Fat                                                                                          fltmgr.sys

---- Registry - GMER 2.1 ----

Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC8544F7A9ADAF24DA5C484EC9  
Reg             HKLM\SOFTWARE\Classes\Software\Microsoft\Multimedia\Components\Installed\DR‚_DRM                                  

---- EOF - GMER 2.1 ----