GMER 1.0.15.15640 - http://www.gmer.net
Rootkit scan 2011-06-17 17:22:27
Windows 5.1.2600 Dodatek Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 SAMSUNG_MP0402H rev.UC100-19
Running: s98pdse7.exe; Driver: C:\DOCUME~1\Pawlik\USTAWI~1\Temp\axlyyaoc.sys


---- User code sections - GMER 1.0.15 ----

UPX1  C:\WINNT\system\svchost.exe[1436] C:\WINNT\system\svchost.exe                               entry point in "UPX1" section [0x018BF770]

---- User IAT/EAT - GMER 1.0.15 ----

IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\Explorer.EXE [KERNEL32.dll!GetProcAddress]           [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress]    [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]  [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress]    [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\Secur32.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]     [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\USER32.dll [KERNEL32.dll!GetProcAddress]    [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\ole32.dll [KERNEL32.dll!GetProcAddress]     [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress]  [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\WININET.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\USERENV.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress]    [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress]   [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT   C:\WINNT\Explorer.EXE[1148] @ C:\WINNT\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress]  [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----