Der Prozess "System" und seine extreme Speicherauslastung

GMER 1.0.15.15640 - GMER - Rootkit Detector and Remover
Rootkit scan 2011-07-06 21:26:24
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e WDC_WD5000AAKS-00UU3A0 rev.01.03B01
Running: ztm97unn.exe; Driver: C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\pxtdqpow.sys


---- System - GMER 1.0.15 ----

SSDT   \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwOpenProcess [0xB8421738]
SSDT   \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwTerminateProcess [0xB84217DC]
SSDT   \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwTerminateThread [0xB8421878]
SSDT   \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwWriteVirtualMemory [0xB8421914]

---- Kernel code sections - GMER 1.0.15 ----

.text  C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                                                    section is writeable [0xB707D3A0, 0x88C445, 0xE8000020]
.text  C:\Programme\CyberLink\PowerDVD11\Common\NavFilter\000.fcl                                                                  section is writeable [0xB0B4D000, 0x2BE8, 0xE8000020]
.vmp2  C:\Programme\CyberLink\PowerDVD11\Common\NavFilter\000.fcl                                                                  entry point in ".vmp2" section [0xB0B6F666]

---- EOF - GMER 1.0.15 ----