GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-08-01 21:07:07
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2 Intel___ rev.1.0.
Running: gmer.exe; Driver: C:\DOCUME~1\keracz\LOCALS~1\Temp\pwddqpow.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )                                                                                                                                                          ZwOpenProcess [0xB2092738]
SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )                                                                                                                                                          ZwTerminateProcess [0xB20927DC]
SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )                                                                                                                                                          ZwTerminateThread [0xB2092878]
SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )                                                                                                                                                          ZwWriteVirtualMemory [0xB2092914]

---- Kernel code sections - GMER 1.0.15 ----

.text           C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                                                                                                                                                                                                            section is writeable [0xB84C3380, 0x21F1AD, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[3012] ntdll.dll!LdrLoadDll                                                                                                                                                                                                             7C91632D 5 Bytes  JMP 00401410 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                                                                                                                                                                                              AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                                                                                                                                                                                            avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                                                                                                                                                                                           avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                                                                                                                                                                                           avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                                                                                                                                                                                         avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001167c427ba                                                                                                                                                                                                         
Reg             HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001167c427ba@001fe3c86c4f                                                                                                                                                                                            0x8D 0x3F 0xBF 0x44 ...
Reg             HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\001167c427ba (not active ControlSet)                                                                                                                                                                                     
Reg             HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\001167c427ba@001fe3c86c4f                                                                                                                                                                                                0x8D 0x3F 0xBF 0x44 ...

---- Files - GMER 1.0.15 ----

File            C:\Documents and Settings\keracz\My Documents\_gsdata_\_saved_\My Music\MUZYKA\VA - Now Thats What I Call Music 22 (2006) - Pop [www.torrentazos.com]\VA - Now Thats What I Call Music 22 (2006) - Pop [www.torrentazos.com]\ultra files\vsultra_failfix\Flash Fail Fix\mainpg.pgm  1442702 bytes

---- EOF - GMER 1.0.15 ----