GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2014-08-31 13:00:02
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000033 ST1000LM024_HN-M101MBB rev.2AR20002 931,51GB
Running: m57g1hli.exe; Driver: C:\Users\Dom\AppData\Local\Temp\fxryrpog.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\atiesrxx.exe[832] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                000007f96061177a 4 bytes [61, 60, F9, 07]
.text   C:\WINDOWS\system32\atiesrxx.exe[832] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                000007f960611782 4 bytes [61, 60, F9, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[404] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                000007f96061177a 4 bytes [61, 60, F9, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[404] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                000007f960611782 4 bytes [61, 60, F9, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1708] C:\WINDOWS\system32\MSIMG32.dll!GradientFill + 690                               000007f95cd21532 4 bytes [D2, 5C, F9, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1708] C:\WINDOWS\system32\MSIMG32.dll!GradientFill + 698                               000007f95cd2153a 4 bytes [D2, 5C, F9, 07]
.text   C:\WINDOWS\system32\BtwRSupportService.exe[1708] C:\WINDOWS\system32\MSIMG32.dll!TransparentBlt + 246                             000007f95cd2165a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDCtrl.exe[3236] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                    000007f95cd21532 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDCtrl.exe[3236] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                    000007f95cd2153a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDCtrl.exe[3236] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                  000007f95cd2165a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDCtrlHelper.exe[4628] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                              000007f95cd21532 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDCtrlHelper.exe[4628] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                              000007f95cd2153a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDCtrlHelper.exe[4628] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                            000007f95cd2165a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDIntelligent.exe[4704] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                             000007f95cd21532 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDIntelligent.exe[4704] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                             000007f95cd2153a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files\Elantech\ETDIntelligent.exe[4704] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                           000007f95cd2165a 4 bytes [D2, 5C, F9, 07]
.text   C:\Windows\RTFTrack.exe[4280] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                                  000007f95cd21532 4 bytes [D2, 5C, F9, 07]
.text   C:\Windows\RTFTrack.exe[4280] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                                  000007f95cd2153a 4 bytes [D2, 5C, F9, 07]
.text   C:\Windows\RTFTrack.exe[4280] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                                000007f95cd2165a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe[4540] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690    000007f95cd21532 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe[4540] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698    000007f95cd2153a 4 bytes [D2, 5C, F9, 07]
.text   C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe[4540] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246  000007f95cd2165a 4 bytes [D2, 5C, F9, 07]

---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [512:532]                                                                                           fffff960008c45e8

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                             unknown MBR code

---- EOF - GMER 2.1 ----