GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2013-10-26 23:45:36
Windows 5.1.2600 Dodatek Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST340014A rev.8.54 37,27GB
Running: wuwbd87o.exe; Driver: C:\DOCUME~1\e\USTAWI~1\Temp\fgtdqpog.sys


---- System - GMER 2.1 ----

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwNotifyChangeKey [0xF78BF690]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwNotifyChangeMultipleKeys [0xF78BF7B0]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwOpenProcess [0xF78BF010]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwOpenThread [0xF78BF490]
SSDT            \??\C:\WINDOWS\system32\drivers\avgtpx86.sys                                                           ZwQueryValueKey [0xF68901D6]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwSuspendProcess [0xF78BF2D0]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwSuspendThread [0xF78BF3B0]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwTerminateProcess [0xF78BF110]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwTerminateThread [0xF78BF1F0]
SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys                                                           ZwWriteVirtualMemory [0xF78BF590]

---- User code sections - GMER 2.1 ----

.text           C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe[1272] ntdll.dll!DbgUiRemoteBreakin  7C9520EC 1 Byte  [C3]
.text           C:\Program Files\Pando Networks\Media Booster\PMB.exe[1480] kernel32.dll!SetUnhandledExceptionFilter   7C8449CD 5 Bytes  [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4}

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\Tcpip \Device\Ip                                                                               avgtdix.sys
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                              avgtdix.sys

Device          \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3                                                            sfsync02.sys
Device          \Driver\atapi \Device\Ide\IdePort0                                                                     sfsync02.sys
Device          \Driver\atapi \Device\Ide\IdePort1                                                                     sfsync02.sys
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e                                                            sfsync02.sys

AttachedDevice  \Driver\Tcpip \Device\Udp                                                                              avgtdix.sys
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                            avgtdix.sys
AttachedDevice  \FileSystem\Fastfat \Fat                                                                               fltmgr.sys

---- EOF - GMER 2.1 ----