GMER 2.1.19163 - http://www.gmer.net Rootkit scan 2013-11-10 19:57:44 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000066 ST950032 rev.0005 465,76GB Running: 0twr6eyq.exe; Driver: C:\Users\Mariusz\AppData\Local\Temp\pwriykod.sys ---- User code sections - GMER 2.1 ---- .text C:\Users\Mariusz\Downloads\OTL.exe[1772] C:\Windows\syswow64\PSAPI.dll!GetModuleInformation + 69 0000000077111465 2 bytes [11, 77] .text C:\Users\Mariusz\Downloads\OTL.exe[1772] C:\Windows\syswow64\PSAPI.dll!GetModuleInformation + 155 00000000771114bb 2 bytes [11, 77] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Windows\System32\svchost.exe [1068:1760] 000007fef79c9688 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\7ce9d3fc3f5e Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\7ce9d3fc3f5e@940070b0ba4f 0x0D 0x50 0x4E 0xD5 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\7ce9d3fc3f5e (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\7ce9d3fc3f5e@940070b0ba4f 0x0D 0x50 0x4E 0xD5 ... ---- EOF - GMER 2.1 ----