GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-03-18 20:02:16
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3 ST3320620AS rev.3.AAK 298,09GB
Running: d89iquzi.exe; Driver: C:\Users\MB\AppData\Local\Temp\pxloypog.sys


---- Kernel code sections - GMER 2.1 ----

.text    C:\Windows\System32\win32k.sys!W32pServiceTable                                                                                                                                      fffff960000c8e00 7 bytes [00, 77, 82, 01, 00, 57, F2]
.text    C:\Windows\System32\win32k.sys!W32pServiceTable + 8                                                                                                                                  fffff960000c8e08 7 bytes [01, 42, C0, FF, 00, 17, DB]

---- User code sections - GMER 2.1 ----

.text    C:\Program Files\Internet Explorer\iexplore.exe[5644] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 690                                                                             000007fd55221532 4 bytes [22, 55, FD, 07]
.text    C:\Program Files\Internet Explorer\iexplore.exe[5644] C:\Windows\SYSTEM32\MSIMG32.dll!GradientFill + 698                                                                             000007fd5522153a 4 bytes [22, 55, FD, 07]
.text    C:\Program Files\Internet Explorer\iexplore.exe[5644] C:\Windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                                                           000007fd5522165a 4 bytes [22, 55, FD, 07]
.text    C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe[1108] C:\Windows\system32\psapi.dll!GetProcessImageFileNameA + 306                                                          000007fd59c4177a 4 bytes [C4, 59, FD, 07]
.text    C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe[1108] C:\Windows\system32\psapi.dll!GetProcessImageFileNameA + 314                                                          000007fd59c41782 4 bytes [C4, 59, FD, 07]

---- Threads - GMER 2.1 ----

Thread   C:\Windows\system32\csrss.exe [2144:4228]                                                                                                                                            fffff960008a05e8
---- Processes - GMER 2.1 ----

Library  C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [3128] (GG drive overlay/GG Network S.A.)(2013-07-31 17:05:47)                          000000005c080000
Library  C:\Users\MB\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [3128] (GG drive menu/GG Network S.A.)(2013-07-2                              000000005ff80000
Library  C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (*** suspicious ***) @ C:\Program Files\Internet Explorer\iexplore.exe [5644] (GG drive overlay/GG Network S.A.)(2013-07-31 17:05:47)  00000000000f0000

---- Registry - GMER 2.1 ----

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                                                                    -934957919

---- EOF - GMER 2.1 ----