GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-04-10 12:11:46 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP1T0L0-1 SAMSUNG_HD200HJ rev.KF100-06 186,18GB Running: gmer.exe; Driver: C:\Users\Tomek\AppData\Local\Temp\kwddykog.sys ---- User code sections - GMER 2.1 ---- .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 0000000071081a22 2 bytes [08, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 0000000071081ad0 2 bytes [08, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 0000000071081b08 2 bytes [08, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 0000000071081bba 2 bytes [08, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 0000000071081bda 2 bytes [08, 71] .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076de1465 2 bytes [DE, 76] .text C:\Windows\SysWOW64\PnkBstrA.exe[1820] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076de14bb 2 bytes [DE, 76] .text ... * 2 .text C:\Programy\MSI Afterburner\MSIAfterburner.exe[2728] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076de1465 2 bytes [DE, 76] .text C:\Programy\MSI Afterburner\MSIAfterburner.exe[2728] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076de14bb 2 bytes [DE, 76] .text ... * 2 ---- Disk sectors - GMER 2.1 ---- Disk \Device\Harddisk1\DR1 unknown MBR code ---- EOF - GMER 2.1 ----