GMER 1.0.15.15627 - http://www.gmer.net
Rootkit scan 2011-05-09 10:14:58
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdePort0 TOSHIBA_MK8025GAS rev.KA023A
Running: cmojo6w2.exe; Driver: C:\DOKUME~1\sim\LOKALE~1\Temp\fgrdapow.sys


---- System - GMER 1.0.15 ----

SSDT            ECC444BE                                                                                                                                                 ZwCreateKey
SSDT            ECC444B4                                                                                                                                                 ZwCreateThread
SSDT            ECC444C3                                                                                                                                                 ZwDeleteKey
SSDT            ECC444CD                                                                                                                                                 ZwDeleteValueKey
SSDT            ECC444D2                                                                                                                                                 ZwLoadKey
SSDT            ECC444A0                                                                                                                                                 ZwOpenProcess
SSDT            ECC444A5                                                                                                                                                 ZwOpenThread
SSDT            ECC444DC                                                                                                                                                 ZwReplaceKey
SSDT            ECC444D7                                                                                                                                                 ZwRestoreKey
SSDT            ECC444C8                                                                                                                                                 ZwSetValueKey

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                                                                tcpipBM.SYS (Bytemobile Kernel Network Provider/Bytemobile, Inc.)

Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdePort0                                                                                                      86C7241F
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdeDeviceP0T1L0-c                                                                                             86C7241F

AttachedDevice  \FileSystem\Fastfat \Fat                                                                                                                                 fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device          \Device\Ide\IdeDeviceP0T0L0-4 -> \??\IDE#DiskTOSHIBA_MK8025GAS_______________________KA023A__#5&34163727&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}  device not found

---- Disk sectors - GMER 1.0.15 ----

Disk            \Device\Harddisk0\DR0                                                                                                                                    TDL4@MBR code has been found                                             <-- ROOTKIT !!!
Disk            \Device\Harddisk0\DR0                                                                                                                                    sector 00: rootkit-like behavior

---- EOF - GMER 1.0.15 ----