GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-04-25 20:40:35 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 GOODRAM_C40 rev.S9FM01.7 55.90GB Running: 333fqvy6.exe; Driver: C:\Users\PiotrC\AppData\Local\Temp\kwdiapow.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002009000 63 bytes [00, 00, 21, 00, 43, 63, 53, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 592 fffff80002009040 6 bytes [9F, 74, 01, 00, 00, 00] ---- User code sections - GMER 2.1 ---- .text D:\Gry\Steam\Steam.exe[2828] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075021465 2 bytes [02, 75] .text D:\Gry\Steam\Steam.exe[2828] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000750214bb 2 bytes [02, 75] .text ... * 2 .text D:\Gry\Steam\bin\steamwebhelper.exe[3996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075021465 2 bytes [02, 75] .text D:\Gry\Steam\bin\steamwebhelper.exe[3996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000750214bb 2 bytes [02, 75] .text ... * 2 .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3472] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075021465 2 bytes [02, 75] .text C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3472] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000750214bb 2 bytes [02, 75] .text ... * 2 .text C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe[1372] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000075048791 4 bytes [C2, 04, 00, 00] .text C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe[1372] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075021465 2 bytes [02, 75] .text C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe[1372] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 00000000750214bb 2 bytes [02, 75] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread System [4:4548] fffffa80069a4d40 ---- EOF - GMER 2.1 ----