GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-03-25 18:24:08
Windows 6.1.7600 
Running: gmer.exe; Driver: C:\Users\Luke\AppData\Local\Temp\kxtdapow.sys


---- System - GMER 1.0.15 ----

INT 0x1F        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341EAF8
INT 0x37        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341E104
INT 0xC1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341E3F4
INT 0xD1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  83406FB4
INT 0xDF        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341E1DC
INT 0xE1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341E958
INT 0xE3        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341E6F8
INT 0xFD        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341EF2C
INT 0xFE        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)  8341F1A8

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                   VMkbd.sys
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                   VMkbd.sys
AttachedDevice  \Driver\tdx \Device\Tcp                                                                   Lbd.sys

Device          \Driver\ACPI_HAL \Device\00000057                                                         halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4                                                    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5                                                    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6                                                    fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\usbohci \Device\USBFDO-0                                                          hcmon.sys
Device          \Driver\usbohci \Device\USBFDO-1                                                          hcmon.sys
Device          \Driver\usbhub \Device\0000006d                                                           hcmon.sys
Device          \Driver\usbehci \Device\USBFDO-2                                                          hcmon.sys
Device          \Driver\usbhub \Device\0000006e                                                           hcmon.sys
Device          \Driver\usbhub \Device\0000006f                                                           hcmon.sys
Device           -> \Driver\atapi \Device\Harddisk0\DR0                                                   85B53CA1

---- Files - GMER 1.0.15 ----

File            C:\Windows\system32\drivers\atapi.sys                                                     suspicious modification

---- EOF - GMER 1.0.15 ----