GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-07-07 16:36:22 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 CT250BX100SSD1 rev.MU02 232,89GB Running: gmer.exe; Driver: C:\Users\Grzegorz\AppData\Local\Temp\pxldapow.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[3404] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW 0000000076682ab1 5 bytes JMP 0000000100a3f046 .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000075678781 8 bytes [31, C0, C2, 04, 00, 90, 90, ...] .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 00000000767e1401 2 bytes JMP 7569b21b C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 00000000767e1419 2 bytes JMP 7569b346 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 00000000767e1431 2 bytes JMP 75718f29 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 00000000767e144a 2 bytes CALL 7567489d C:\Windows\syswow64\kernel32.dll .text ... * 9 .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000767e14dd 2 bytes JMP 75718822 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000767e14f5 2 bytes JMP 757189f8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 00000000767e150d 2 bytes JMP 75718718 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 00000000767e1525 2 bytes JMP 75718ae2 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 00000000767e153d 2 bytes JMP 7568fca8 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 00000000767e1555 2 bytes JMP 756968ef C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 00000000767e156d 2 bytes JMP 75718fe3 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 00000000767e1585 2 bytes JMP 75718b42 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 00000000767e159d 2 bytes JMP 757186dc C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000767e15b5 2 bytes JMP 7568fd41 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000767e15cd 2 bytes JMP 7569b2dc C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000767e16b2 2 bytes JMP 75718ea4 C:\Windows\syswow64\kernel32.dll .text C:\Program Files\AVAST Software\Avast\avastui.exe[3536] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000767e16bd 2 bytes JMP 75718671 C:\Windows\syswow64\kernel32.dll ---- EOF - GMER 2.1 ----