GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-02-07 21:56:18 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Intel___ rev.1.0. 931,52GB Running: rqfg5zzo.exe; Driver: C:\Users\Marek\AppData\Local\Temp\ugloypow.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff800035a9000 45 bytes [00, 00, 80, 00, 46, 69, 6C, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 574 fffff800035a902e 17 bytes [44, 00, 00, 00, 00, 00, 00, ...] ---- User code sections - GMER 2.1 ---- .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 00000000724e1a22 2 bytes [4E, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 00000000724e1ad0 2 bytes [4E, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 00000000724e1b08 2 bytes [4E, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 00000000724e1bba 2 bytes [4E, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 00000000724e1bda 2 bytes [4E, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000750b1465 2 bytes [0B, 75] .text C:\Windows\SysWOW64\PnkBstrA.exe[1540] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000750b14bb 2 bytes [0B, 75] .text ... * 2 ---- EOF - GMER 2.1 ----