GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2014-08-27 22:52:34
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000033 ST1000LM024_HN-M101MBB rev.2AR20002 931,51GB
Running: m57g1hli.exe; Driver: C:\Users\Dom\AppData\Local\Temp\fxryrpog.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\atiesrxx.exe[628] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                000007fa41d1177a 4 bytes [D1, 41, FA, 07]
.text   C:\WINDOWS\system32\atiesrxx.exe[628] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                000007fa41d11782 4 bytes [D1, 41, FA, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[1196] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                               000007fa41d1177a 4 bytes [D1, 41, FA, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[1196] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                               000007fa41d11782 4 bytes [D1, 41, FA, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1948] C:\WINDOWS\system32\MSIMG32.dll!GradientFill + 690                               000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1948] C:\WINDOWS\system32\MSIMG32.dll!GradientFill + 698                               000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1948] C:\WINDOWS\system32\MSIMG32.dll!TransparentBlt + 246                             000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDCtrl.exe[3176] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                    000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDCtrl.exe[3176] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                    000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDCtrl.exe[3176] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                  000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\WINDOWS\Explorer.EXE[3192] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                                  000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\WINDOWS\Explorer.EXE[3192] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                                  000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\WINDOWS\Explorer.EXE[3192] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                                000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Classic Shell\ClassicStartMenu.exe[3272] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                      000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Classic Shell\ClassicStartMenu.exe[3272] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                      000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Classic Shell\ClassicStartMenu.exe[3272] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                    000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDCtrlHelper.exe[3764] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                              000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDCtrlHelper.exe[3764] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                              000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDCtrlHelper.exe[3764] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                            000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDIntelligent.exe[3784] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                             000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDIntelligent.exe[3784] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                             000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files\Elantech\ETDIntelligent.exe[3784] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                           000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\Windows\RTFTrack.exe[3400] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                                  000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\Windows\RTFTrack.exe[3400] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                                  000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\Windows\RTFTrack.exe[3400] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                                000007fa3d34165a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe[3444] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690    000007fa3d341532 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe[3444] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698    000007fa3d34153a 4 bytes [34, 3D, FA, 07]
.text   C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe[3444] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246  000007fa3d34165a 4 bytes [34, 3D, FA, 07]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [780:804]                                                                                           fffff9600081b5e8

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                             unknown MBR code

---- EOF - GMER 2.1 ----