GMER 1.0.15.15640 - http://www.gmer.net
Rootkit scan 2011-07-12 18:48:55
Windows 5.1.2600 Dodatek Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 WDC_WD1600AAJS-07PSA0 rev.05.06H05
Running: jo5izvqv.exe; Driver: C:\DOCUME~1\Mariusz\USTAWI~1\Temp\kwaiypow.sys


---- System - GMER 1.0.15 ----

SSDT            Lbd.sys (Boot Driver/Lavasoft AB)                                                                 ZwCreateKey [0xBA0F887E]
SSDT            Lbd.sys (Boot Driver/Lavasoft AB)                                                                 ZwSetValueKey [0xBA0F8BFE]
SSDT            \SystemRoot\system32\DRIVERS\PSINProc.sys (PSINProc Filter Driver for XP32/Panda Security, S.L.)  ZwTerminateProcess [0xB48E2416]

---- Kernel code sections - GMER 1.0.15 ----

.text           C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                          section is writeable [0xB8E1A380, 0x34E2EF, 0xE8000020]
.text           C:\WINDOWS\system32\drivers\oreans32.sys                                                          section is writeable [0xBA2C8280, 0x7B1C, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[2020] ntdll.dll!LdrLoadDll                           7C915CBB 5 Bytes  JMP 00401410 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2020] USER32.dll!GetWindowInfo                       77D3F122 5 Bytes  JMP 104AC3EA C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                         Lbd.sys (Boot Driver/Lavasoft AB)

Device          \Driver\prodrv06 \Device\ProDrv06                                                                 E1D64420
Device          \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3                                                       prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\atapi \Device\Ide\IdePort0                                                                prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\atapi \Device\Ide\IdePort1                                                                prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e                                                       prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device          \Driver\prohlp02 \Device\ProHlp02                                                                 E1620170

---- EOF - GMER 1.0.15 ----