GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-12-16 23:31:23 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 HITACHI_ rev.PC4Z 465,76GB Running: w4mm11pe.exe; Driver: C:\Users\Kuba\AppData\Local\Temp\afrcaaoc.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80003a07000 45 bytes [00, 00, 16, 02, 4E, 74, 66, ...] INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80003a0702f 10 bytes [00, 01, 00, 06, 00, 00, 00, ...] ---- Threads - GMER 2.1 ---- Thread C:\windows\System32\svchost.exe [2112:5196] 000007fef6e69688 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\002269ec2d88 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\18f46af4d8fb Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\002269ec2d88 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\18f46af4d8fb (not active ControlSet) ---- EOF - GMER 2.1 ----