GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-11-02 19:40:24
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3 ST31000340AS rev.SD1A 931,51GB
Running: irbzj907.exe; Driver: C:\Users\user\AppData\Local\Temp\aftcaaob.sys


---- User IAT/EAT - GMER 2.1 ----

IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmAddToStreamDWord]      [7fef5e3741c] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmSet]                   [7fef5e35f10] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmEndSession]            [7fef5e35674] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmStartSession]          [7fef5e35e2c] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmStartUpload]           [7fef5e37f48] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmSetAppVersion]         [7fef5e36a38] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmSetMachineId]          [7fef5e36ee8] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmWriteSharedMachineId]  [7fef5e37b58] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmCreateNewId]           [7fef5e37ea0] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmReadSharedMachineId]   [7fef5e378b0] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmGetSession]            [7fef5e34fb4] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmSetAppId]              [7fef5e35d38] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll
IAT  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2072] @ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[sqmapi.dll!SqmAddToStreamString]     [7fef5e37584] C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll

---- EOF - GMER 2.1 ----