GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-12-02 17:14:51
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST975042 rev.0003 698,64GB
Running: g6l4djmu.exe; Driver: C:\Users\Irmina\AppData\Local\Temp\awdcqpod.sys


---- User code sections - GMER 2.1 ----

.text   C:\Program Files (x86)\PasswordBox\pbbtnService.exe[2072] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                      0000000076681465 2 bytes [68, 76]
.text   C:\Program Files (x86)\PasswordBox\pbbtnService.exe[2072] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                     00000000766814bb 2 bytes [68, 76]
.text   ...                                                                                                                                                    * 2
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                                                00000000727911a8 2 bytes [79, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                                          00000000727913a8 2 bytes [79, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                                              0000000072791422 2 bytes [79, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                                       0000000072791498 2 bytes [79, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 195                            00000000725b1b41 2 bytes [5B, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 362                            00000000725b1be8 2 bytes [5B, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 418                            00000000725b1c20 2 bytes [5B, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 596                            00000000725b1cd2 2 bytes [5B, 72]
.text   C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe[2528] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 628                            00000000725b1cf2 2 bytes [5B, 72]
.text   C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2956] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076681465 2 bytes [68, 76]
.text   C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[2956] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000766814bb 2 bytes [68, 76]
.text   ...                                                                                                                                                    * 2

---- Threads - GMER 2.1 ----

Thread  C:\windows\System32\svchost.exe [2668:3344]                                                                                                            000007fef7449688

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\20107af90d43                                                                            
Reg     HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\20107af90d43 (not active ControlSet)                                                        

---- EOF - GMER 2.1 ----