GMER 1.0.15.15087 - http://www.gmer.net
Rootkit scan 2009-09-17 21:18:49
Windows 5.1.2600 Service Pack 3
Running: y8xb6e72[1].exe; Driver: C:\DOCUME~1\TMW\LOCALS~1\Temp\uxtdqpod.sys


---- System - GMER 1.0.15 ----

SSDT            82F7CC88                                            ZwAllocateVirtualMemory
SSDT            82FE28F8                                            ZwCreateKey
SSDT            82FD94E0                                            ZwCreateProcess
SSDT            82FDC168                                            ZwCreateProcessEx
SSDT            82FDD1F8                                            ZwCreateThread
SSDT            82FC7380                                            ZwDeleteKey
SSDT            82FDC250                                            ZwDeleteValueKey
SSDT            82F691B0                                            ZwQueueApcThread
SSDT            82F90608                                            ZwReadVirtualMemory
SSDT            82F8D548                                            ZwRenameKey
SSDT            82F69468                                            ZwSetContextThread
SSDT            82FE1580                                            ZwSetInformationKey
SSDT            82FDB218                                            ZwSetInformationProcess
SSDT            82FEBDB8                                            ZwSetInformationThread
SSDT            82F95208                                            ZwSetValueKey
SSDT            82FB1190                                            ZwSuspendProcess
SSDT            82F9CC40                                            ZwSuspendThread
SSDT            82F99378                                            ZwTerminateProcess
SSDT            82FC32D8                                            ZwTerminateThread
SSDT            82F93228                                            ZwWriteVirtualMemory

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                              ssfs0bbc.sys (Spy Sweeper FileSystem Filter Driver/Webroot Software, Inc. (www.webroot.com))
AttachedDevice  \FileSystem\Ntfs \Ntfs                              mozy.sys (Mozy Change Monitor Filter Driver/Mozy, Inc.)

Device          \Driver\Tcpip \Device\Ip                            820E72C8
Device          \Driver\Tcpip \Device\Ip                            822A1248
Device          \Driver\Tcpip \Device\Ip                            821CA640
Device          \Driver\Tcpip \Device\Tcp                           820E72C8
Device          \Driver\Tcpip \Device\Tcp                           822A1248
Device          \Driver\Tcpip \Device\Tcp                           821CA640
Device          \Driver\Tcpip \Device\Udp                           820E72C8
Device          \Driver\Tcpip \Device\Udp                           822A1248
Device          \Driver\Tcpip \Device\Udp                           821CA640
Device          \Driver\Tcpip \Device\RawIp                         820E72C8
Device          \Driver\Tcpip \Device\RawIp                         822A1248
Device          \Driver\Tcpip \Device\RawIp                         821CA640
Device          \Driver\Tcpip \Device\IPMULTICAST                   820E72C8
Device          \Driver\Tcpip \Device\IPMULTICAST                   822A1248
Device          \Driver\Tcpip \Device\IPMULTICAST                   821CA640
Device          \FileSystem\Fastfat \Fat                            ADEACD20

AttachedDevice  \FileSystem\Fastfat \Fat                            ssfs0bbc.sys (Spy Sweeper FileSystem Filter Driver/Webroot Software, Inc. (www.webroot.com))
AttachedDevice  \FileSystem\Fastfat \Fat                            mozy.sys (Mozy Change Monitor Filter Driver/Mozy, Inc.)

Device          \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer  tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer   tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer       tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer    tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer   tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device          \FileSystem\Cdfs \Cdfs                              tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)

---- EOF - GMER 1.0.15 ----