GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2016-02-12 14:12:43
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST500LT0 rev.0001 465,76GB
Running: ujdmoxll.exe; Driver: C:\Users\WADCA~1\AppData\Local\Temp\pwrdqpog.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17      0000000075701401 2 bytes JMP 7699b233 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17        0000000075701419 2 bytes JMP 7699b35e C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17      0000000075701431 2 bytes JMP 76a19011 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42      000000007570144a 2 bytes CALL 769748ad C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                          * 9
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17         00000000757014dd 2 bytes JMP 76a1890a C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17  00000000757014f5 2 bytes JMP 76a18ae0 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17         000000007570150d 2 bytes JMP 76a18800 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17  0000000075701525 2 bytes JMP 76a18bca C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17        000000007570153d 2 bytes JMP 7698fcc0 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17             0000000075701555 2 bytes JMP 76996907 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17      000000007570156d 2 bytes JMP 76a190c9 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17        0000000075701585 2 bytes JMP 76a18c2a C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17           000000007570159d 2 bytes JMP 76a187c4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17        00000000757015b5 2 bytes JMP 7698fd59 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17      00000000757015cd 2 bytes JMP 7699b2f4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20  00000000757016b2 2 bytes JMP 76a18f8c C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe[4936] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31  00000000757016bd 2 bytes JMP 76a18759 C:\Windows\syswow64\kernel32.dll
?      C:\Windows\system32\mssprxy.dll [4936] entry point in ".rdata" section                                                       000000006a0a71e6

---- EOF - GMER 2.1 ----