GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-03-28 13:44:30
Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 TOSHIBA_MK6034GSX rev.AH101D 55,89GB
Running: vj9d1pnv.exe; Driver: C:\DOCUME~1\cp24\USTAWI~1\Temp\afecypob.sys


---- User code sections - GMER 2.1 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtCreateFile               7C90D0AE 5 Bytes  JMP 0112F39A C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtFlushBuffersFile         7C90D32E 5 Bytes  JMP 0112F0A2 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtQueryFullAttributesFile  7C90D7AE 5 Bytes  JMP 0112F157 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtReadFile                 7C90D9CE 5 Bytes  JMP 0112F2DF C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtReadFileScatter          7C90D9DE 5 Bytes  JMP 015B9BC8 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtWriteFile                7C90DF7E 5 Bytes  JMP 0112F53E C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!NtWriteFileGather          7C90DF8E 5 Bytes  JMP 015B9C18 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] ntdll.dll!LdrLoadDll                 7C91632D 5 Bytes  JMP 100098D2 C:\Program Files\Mozilla Firefox\mozglue.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] kernel32.dll!lstrlenW + 43           7C809AEC 7 Bytes  JMP 015A6171 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] kernel32.dll!MapViewOfFileEx + 6A    7C80B9A0 7 Bytes  JMP 015A4446 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] kernel32.dll!ValidateLocale + B648   7C844EE0 7 Bytes  JMP 0134EECB C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] GDI32.dll!SetDIBitsToDevice + 20A    77F19E14 7 Bytes  JMP 015A29F1 C:\Program Files\Mozilla Firefox\xul.dll
.text           C:\Program Files\Mozilla Firefox\firefox.exe[3552] USER32.dll!GetWindowInfo             7E37C49C 5 Bytes  JMP 020BA419 C:\Program Files\Mozilla Firefox\xul.dll

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\Tcpip \Device\Ip                                                                {df8eec40-f909-439c-9ffe-3fee212f71b9}t.sys
AttachedDevice  \Driver\Kbdclass \Device\KeyboardClass0                                                 wdf01000.sys
AttachedDevice  \Driver\Kbdclass \Device\KeyboardClass1                                                 wdf01000.sys
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                               {df8eec40-f909-439c-9ffe-3fee212f71b9}t.sys
AttachedDevice  \Driver\Tcpip \Device\Udp                                                               {df8eec40-f909-439c-9ffe-3fee212f71b9}t.sys
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                             {df8eec40-f909-439c-9ffe-3fee212f71b9}t.sys

---- EOF - GMER 2.1 ----