GMER 1.0.15.15507 - http://www.gmer.net
Rootkit scan 2004-05-17 05:24:49
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST380011A 3.16
Running: j9w3yjyq.exe; Driver: C:\DOCUME~1\mindara\LOCALS~1\Temp\pxtdqpow.sys


---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!DialogBoxParamW          7E4247AB 5 Bytes  JMP 42F0F301 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!DialogBoxIndirectParamW  7E432072 5 Bytes  JMP 430A1667 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!MessageBoxIndirectA      7E43A082 5 Bytes  JMP 430A15E8 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!DialogBoxParamA          7E43B144 5 Bytes  JMP 430A162C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!MessageBoxExW            7E450838 5 Bytes  JMP 430A1574 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!MessageBoxExA            7E45085C 5 Bytes  JMP 430A15AE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!DialogBoxIndirectParamA  7E456D7D 5 Bytes  JMP 430A16A2 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2644] USER32.dll!MessageBoxIndirectW      7E4664D5 5 Bytes  JMP 42F316B6 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Fastfat \Fat                                                                  fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- Disk sectors - GMER 1.0.15 ----

Disk            \Device\Harddisk0\DR0                                                                     sector 09: copy of MBR

---- EOF - GMER 1.0.15 ----