GMER 2.1.19115 - http://www.gmer.net Rootkit scan 2013-03-01 00:34:20 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 ST950032 rev.0003 465,76GB Running: ef9t2juq.exe; Driver: C:\Users\Maciek\AppData\Local\Temp\ffdcipoc.sys ---- User code sections - GMER 2.1 ---- .text C:\Users\Maciek\Desktop\PLIKI\instalki\SECUNIA\ef9t2juq.exe[6140] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076511465 2 bytes [51, 76] .text C:\Users\Maciek\Desktop\PLIKI\instalki\SECUNIA\ef9t2juq.exe[6140] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000765114bb 2 bytes [51, 76] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Windows\System32\svchost.exe [1808:1276] 000007feff93a808 Thread C:\Windows\System32\svchost.exe [2248:932] 000007fef38f9688 Thread C:\Windows\system32\taskhost.exe [4772:4784] 000007fefac9ef24 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dd96bc4 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dd96bc4@001fe1ffde5c 0x4F 0x17 0xA2 0xAE ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dd96bc4@f8db7fbd9c1c 0xFF 0x29 0xC9 0x74 ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dd96bc4@f8db7fe6f260 0xB0 0x83 0xB2 0xFD ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dd96bc4@a87b3929713e 0x90 0xB5 0xB5 0x95 ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dd96bc4@3c8bfe1f9456 0x99 0xDE 0xBC 0x4E ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dd96bc4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dd96bc4@001fe1ffde5c 0x4F 0x17 0xA2 0xAE ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dd96bc4@f8db7fbd9c1c 0xFF 0x29 0xC9 0x74 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dd96bc4@f8db7fe6f260 0xB0 0x83 0xB2 0xFD ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dd96bc4@a87b3929713e 0x90 0xB5 0xB5 0x95 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dd96bc4@3c8bfe1f9456 0x99 0xDE 0xBC 0x4E ... ---- EOF - GMER 2.1 ----