GMER 1.0.15.14966 - http://www.gmer.net
Rootkit scan 2009-04-27 20:16:27
Windows 6.0.6001 Service Pack 1


---- System - GMER 1.0.15 ----

SSDT            887C1CE8                                                                                                                                              ZwAlertResumeThread
SSDT            87BA2CD8                                                                                                                                              ZwAlertThread
SSDT            88686188                                                                                                                                              ZwAllocateVirtualMemory
SSDT            87A9BBC8                                                                                                                                              ZwAlpcConnectPort
SSDT            8868B048                                                                                                                                              ZwAssignProcessToJobObject
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwCreateKey [0x8F0367A6]
SSDT            886BCBC0                                                                                                                                              ZwCreateMutant
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwCreateProcess [0x8F033794]
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwCreateProcessEx [0x8F033F1E]
SSDT            886799B8                                                                                                                                              ZwCreateSymbolicLinkObject
SSDT            88641BE8                                                                                                                                              ZwCreateThread
SSDT            88689050                                                                                                                                              ZwDebugActiveProcess
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwDeleteKey [0x8F0371F0]
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwDeleteValueKey [0x8F03742A]
SSDT            88686460                                                                                                                                              ZwDuplicateObject
SSDT            88687268                                                                                                                                              ZwFreeVirtualMemory
SSDT            887CB048                                                                                                                                              ZwImpersonateAnonymousToken
SSDT            8871A6B0                                                                                                                                              ZwImpersonateThread
SSDT            87A2E358                                                                                                                                              ZwLoadDriver
SSDT            88687088                                                                                                                                              ZwMapViewOfSection
SSDT            8864E048                                                                                                                                              ZwOpenEvent
SSDT            88686840                                                                                                                                              ZwOpenProcess
SSDT            87B7AF00                                                                                                                                              ZwOpenProcessToken
SSDT            885E3330                                                                                                                                              ZwOpenSection
SSDT            88686670                                                                                                                                              ZwOpenThread
SSDT            88677C80                                                                                                                                              ZwProtectVirtualMemory
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwRenameKey [0x8F03812A]
SSDT            87B42110                                                                                                                                              ZwResumeThread
SSDT            879AE398                                                                                                                                              ZwSetContextThread
SSDT            88688C70                                                                                                                                              ZwSetInformationProcess
SSDT            88687050                                                                                                                                              ZwSetSystemInformation
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwSetValueKey [0x8F03783C]
SSDT            8864F048                                                                                                                                              ZwSuspendProcess
SSDT            87B94238                                                                                                                                              ZwSuspendThread
SSDT            87A0A3A8                                                                                                                                              ZwTerminateProcess
SSDT            88154CF8                                                                                                                                              ZwTerminateThread
SSDT            87F4B450                                                                                                                                              ZwUnmapViewOfSection
SSDT            88687978                                                                                                                                              ZwWriteVirtualMemory
SSDT            886785D0                                                                                                                                              ZwCreateThreadEx
SSDT            \SystemRoot\system32\drivers\iksysflt.sys (System Filter Device Driver/PCTools Research Pty Ltd.)                                                     ZwCreateUserProcess [0x8F0346B6]

Code            87A01420                                                                                                                                              ZwEnumerateKey
Code            879F92F0                                                                                                                                              ZwFlushInstructionCache
Code            879F22BD                                                                                                                                              IofCallDriver
Code            879BC2BE                                                                                                                                              IofCompleteRequest

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                                               Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                                                               Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice  \Driver\tdx \Device\Tcp                                                                                                                               SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice  \Driver\tdx \Device\Udp                                                                                                                               SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice  \Driver\tdx \Device\RawIp                                                                                                                             SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
---- Processes - GMER 1.0.15 ----

Library         \\?\globalroot\systemroot\system32\gxvxcnecxtfmkiqnusfiyscxvcnpwscyuuitc.dll (*** hidden *** ) @ C:\Program Files\Mozilla Firefox\firefox.exe [4564]  0x10000000                                                 

---- EOF - GMER 1.0.15 ----