API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 12th, 2013
120
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.05 KB | None | 0 0
raw download clone embed print report
  1. GMER 2.1.19163 - http://www.gmer.net
  2. Rootkit scan 2013-07-12 13:24:55
  3. Windows 5.1.2600 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path0Target0Lun0 ST350041 rev.CC38 465.76GB
  4. Running: k50wfoo2.exe; Driver: C:\DOCUME~1\Pedja\LOCALS~1\Temp\kfroraog.sys
  5.  
  6.  
  7. ---- System - GMER 2.1 ----
  8.  
  9. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwNotifyChangeKey [0xB84515D0]
  10. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwNotifyChangeMultipleKeys [0xB8451700]
  11. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwOpenProcess [0xB8451010]
  12. SSDT \??\C:\WINDOWS\system32\drivers\avgtpx86.sys ZwQueryValueKey [0xA43791D6]
  13. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwSuspendProcess [0xB8451300]
  14. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwSuspendThread [0xB84513E0]
  15. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwTerminateProcess [0xB8451120]
  16. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwTerminateThread [0xB8451210]
  17. SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys ZwWriteVirtualMemory [0xB84514D0]
  18.  
  19. ---- Kernel code sections - GMER 2.1 ----
  20.  
  21. .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB63C3380, 0x3DF295, 0xE8000020]
  22.  
  23. ---- User code sections - GMER 2.1 ----
  24.  
  25. .text C:\Program Files\Mozilla Firefox\firefox.exe[2180] ntdll.dll!LdrLoadDll 7C9161CA 5 Bytes JMP 0171EEB0 C:\Program Files\Mozilla Firefox\xul.dll
  26. .text C:\Program Files\Mozilla Firefox\firefox.exe[2180] kernel32.dll!lstrlenW + 43 7C809A7C 7 Bytes JMP 01D2979B C:\Program Files\Mozilla Firefox\xul.dll
  27. .text C:\Program Files\Mozilla Firefox\firefox.exe[2180] kernel32.dll!MapViewOfFileEx + 6A 7C80B788 7 Bytes JMP 01D29778 C:\Program Files\Mozilla Firefox\xul.dll
  28. .text C:\Program Files\Mozilla Firefox\firefox.exe[2180] kernel32.dll!lstrcpyn + 70 7C810381 7 Bytes JMP 01724CE9 C:\Program Files\Mozilla Firefox\xul.dll
  29. .text C:\Program Files\Mozilla Firefox\firefox.exe[2180] GDI32.dll!SetWindowOrgEx + 15E 77F1960B 7 Bytes JMP 01D296F9 C:\Program Files\Mozilla Firefox\xul.dll
  30. .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2708] USER32.dll!SetPropW + 11B 77D4DECE 7 Bytes JMP 1099D8D4 C:\Program Files\Mozilla Firefox\xul.dll
  31. .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2708] USER32.dll!SetWindowLongA + 19 77D4DEEC 7 Bytes JMP 1099D863 C:\Program Files\Mozilla Firefox\xul.dll
  32. .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2708] USER32.dll!GetWindowInfo 77D4F122 5 Bytes JMP 107F2A67 C:\Program Files\Mozilla Firefox\xul.dll
  33. .text C:\Program Files\Mozilla Firefox\plugin-container.exe[2708] USER32.dll!GetMenuContextHelpId + 1A 77D94F11 7 Bytes JMP 107F306A C:\Program Files\Mozilla Firefox\xul.dll
  34.  
  35. ---- Devices - GMER 2.1 ----
  36.  
  37. AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys
  38. AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys
  39. AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys
  40. AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys
  41.  
  42. ---- EOF - GMER 2.1 ----
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!