GMER 2.1.19163 - http://www.gmer.net Rootkit scan 2013-11-11 00:27:23 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3 MAXTOR_STM3320620AS rev.3.AAE 298,09GB Running: nxubhslc.exe; Driver: C:\Users\AMD\AppData\Local\Temp\uxriapow.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff800031b6000 65 bytes [00, 00, 15, 02, 46, 69, 6C, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 610 fffff800031b6042 4 bytes [00, 00, 00, 00] ---- User code sections - GMER 2.1 ---- .text E:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDSrv.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077661465 2 bytes [66, 77] .text E:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDSrv.exe[1792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000776614bb 2 bytes [66, 77] .text ... * 2 .text E:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe[3396] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077661465 2 bytes [66, 77] .text E:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASDTray.exe[3396] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000776614bb 2 bytes [66, 77] .text ... * 2 .text C:\Program Files (x86)\AVG\AVG2014\avgui.exe[3496] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077661465 2 bytes [66, 77] .text C:\Program Files (x86)\AVG\AVG2014\avgui.exe[3496] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000776614bb 2 bytes [66, 77] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Windows\System32\spoolsv.exe [1572:1324] 000007fef8ba10c8 Thread C:\Windows\System32\spoolsv.exe [1572:1844] 000007fef7d66144 Thread C:\Windows\System32\spoolsv.exe [1572:1908] 000007fef7b55fd0 Thread C:\Windows\System32\spoolsv.exe [1572:1892] 000007fef7b43438 Thread C:\Windows\System32\spoolsv.exe [1572:1896] 000007fef7b563ec Thread C:\Windows\System32\spoolsv.exe [1572:2012] 000007fef8305e5c Thread C:\Windows\System32\spoolsv.exe [1572:1696] 000007fef86a5074 ---- EOF - GMER 2.1 ----