GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-03-06 18:42:12
Windows 6.1.7600  
Running: Gmer.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0xE4 0xA6 0x2E 0xFE ...
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     D:\Programy\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0xA0 0x02 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0x6E 0x68 0x09 0xFB ...
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet001\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0x79 0x4E 0x10 0x07 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Bind                                                    ??????????:??????s?g;A????????????X???????????????P??????%??????e%??????????????????????PNP_TDI?????????????????????????????int?????ROOT\CompositeBus??sof??? "??????h?????h???????????????????????n??????N???????????D??4??MONITOR\PTS0309??@??? ?????????????Rai??5&478d80e&0??0????L???????????????y?????? ???????.???????/???????????????????????????7?????????d?:???????????????????????????l????????????N??????1?????DV_??????????????s?????h?????????????????????vo???????????C?????e??????N??????????????????????????????e??LegacyDriver?L??????????????????????????????????????????????????2?????????47?????????????????? ???????????????????????????????????5398-158????????????????N?????????????????????????????????????????????????????????? ???????????????.??????????????????Tcpip?????????????????????????????????????????????18?????????0???????????????????????????? ?????????????????????????????????????????????????????????????????????????????????????????Z????????????????????????????? ????????????????????????????????????????????????
Reg  HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Route                                                   ????????????????????????Microsoft???????????Ne??????????????????????*6to4mp?????????????????????1???????????????????? ?gB ???????????? ?????????p?????????????????s??????????????????????????B??????????????t???system32\DRIVERS\usbhub.sys?\usbhub.sys?????????????????t???system32\DRIVERS\vdrvroot.sys???system32\DRIVERS\USBSTOR.SYS?USBSTOR.SYS????????????????t?????J???????????h??????????????????????????????t???????????????????????????????????????????B????????????????????????????????????????????????????????????????:???????????h?????????????????????????????????????????????????????????????????????????????????????????????????Sterownik modu?u wyliczaj?cego dysku wirtualnego Microsoft????????$?????????p???????????????p???system32\DRIVERS\volmgr.sys?????System Bus Extender?????????????????t?????????????????????<????????????e????Sterownik pami?ci masowej USB?????<???????????h?????Video Save??????????????????t?????`????????????e????????????????t???????????????p?????????????????????????????????V??????????????d??\SystemRoot
Reg  HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Export                                                  ?????????????+2?6?????????????????????????????b????????????n????????ol???????????????????????????s???e??????@volume.inf,%msft%;Microsoft??????b????????????e????????????????????@%systemroot%\system32\drivers\dfsc.sys,-102????????????????????????system32\DRIVERS\flpydisk.sys?lpydisk.sys???????????????????????AB900???????????????????????RasSstp??0??????????????????? N?????????????e???????????????????????????? l?????????????????{e83e7c80-99c9-11e0-9d0b-00004df7b2e3}??????????{00000000-0000-0000-0000-000000000000}?<?<??????t???????????????????????????????????????????????????????????s???????????????????????????????@%SystemRoot%\system32\drivers\mountmgr.sys,-100????6-21-2006???????s???????????????????????\SystemRoot\System32\win32k.sys???????????????????????@?????????x???%SystemRoot%\system32\psxss.exe?????????????? ??????Debug?Windows?? ? ??????????????????????????? ???s??%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 Serv
Reg  HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Bind                                               ???????????????????????????????????????????d?????????????????????????????????????????????n??????ax???????????????????????n????????????????????N??????????????????????????a?????????nSy????X??????5????????????????X?????????????volsnap?????ACPI\FixedButton?*FixedButton???????? .??????0?????}?????????????g?????sad????N??????c????D?????*ISATAP?????? ??????????????????????.NT?????11????????b??????o???????p??? Z????????????0????????????????? ??????????????s????????g??????s???? ??????????????????????????????????????????????????nmwcdx64??????????????????????????N?????????????????????????????????????FDC\GENERIC_FLOPPY_DRIVE????ACPI\PNP0103?*PNP0103????????????????<??????Ta???????????????????d?????s???????????????????s??????N??????-????D11c???????'????????????????????????????????????a?????ACPI\PNP0B00?*PNP0B00???????? ???????n??????????1c??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????WPD???????????????????????t???????N??????c??????????????????? ?????
Reg  HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Route                                              ??????????X???????????????$??????T??????????????????User Mode Driver Frameworks Platform Driver?????Root\*6TO4MP\0038????????????????1??????COM16???????m???????????????????11????????0????????????e????????????????????????????????????Root\*6TO4MP\0037???????x4???????????????????????????????????D??3C???????????X??????????????*pnp09ff????WmiApRpl.ini??????????????????????????????????????????????????????????X???????????hsui?????????????????? ????????????????????4??????6????????????????????????????????????????????????????????????|??????????????????????????????????volume.inf????????????????R?????????????? 6??????????????#??pci\ven_10de&dev_0641???????????????? ?????????????????????,????????:????????\????8??????A????hpDa????$??????????????????????????????????????????????????????????????e????????????????????????>???????????????:??????t???e??????????Modem?????`??????????????????????c???????m??????????\Device\{0D06B48A-2F5E-4B36-89B5-5EEE7AEFCB52}??02????"?????????????????????????t?????????????>?????????????SEMC    ?f,
Reg  HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Export                                             ??????????????????????*?????????????????s???{4d36e967-e325-11ce-bfc1-08002be10318}???????????????5???????m??USB\ROOT_HUB&VID1002&PID438B&REV0000?USB\ROOT_HUB&VID1002&PID438B?USB\ROOT_HUB???????????????????????????????????????????M???e????*??????v?????????n?v??Port_#0001.Hub_#0004??????N?????????????????????????l???@oem2.inf,%manufacturer%;Nokia????????"?????????????????e?????????????????<???????????h??????????????????s???????4??????????????????????Port_#0001.Hub_#0002????{4d36e978-e325-11ce-bfc1-08002be10318}??????VolumeSnapshot?ten??? ??????????????????????????????? ?????????????????????,??"???&?r??? ???????2%???????????B??????????????????fd??{533c5b84-ec70-11d2-9505-00c04f79deaf}\0006??<???<????????????<??????i?g????@%systemroot%\system32\drivers\afd.sys,-1000????int?????????}???????????? l?????????????????? ???????f??????? ??system32\DRIVERS\monitor.sys??????????????*????????????????n?i??@cdrom.inf,%gencdrom_devdesc%;Stacja dysk?w CD-ROM??????????e????????????????e???????????I???O??????????????????????{36
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0xD0 0x45 0x11 0x93 ...
Reg  HKLM\SYSTEM\ControlSet003\services\LanmanServer\Linkage@Bind                                                        ????????????????????????????$???4????? ??????? ??????????????? ??????????? ????????????????????????????????????????? ???????????????????$???4????? ??????? ??????????????? ??????????? ????????????????????????????????????????? ???????????????????$???4????? ??????? ??????????????? ??????????? ????????????????????????????????????????? ???????????????? l??????T?????04???system32\drivers\fileinfo.sys???{00000000-0000-0000-FFFF-FFFFFFFFFFFF}? "{???????????r??????????????????????????????{4d36e972-e325-11ce-bfc1-08002be10318}\0056??????????????????????:???????????????????????????????????D?????s-4??{4d36e972-e325-11ce-bfc1-08002be10318}\0042?09??@nettun.inf,%msft%;Microsoft????Karta Microsoft 6to4 #33??????4?????????????8A???????????????????????#??????????????? ??????91????$?????????????????????????????????????????????????????????6-21-2006????????????:???:???????????????????s??ep??*6to4mp?????????????????t?????????????????????????????????????????????????????:??????E??????ic????\????????????e??????<????????g????Sterown
Reg  HKLM\SYSTEM\ControlSet003\services\LanmanServer\Linkage@Route                                                       ?????????????d????N??????#?????Dco?????????????????????llt??11???????????????????????i????????????V????????????n?????????????????????????????????????????????????????????????4??{4d36e972-e325-11ce-bfc1-08002be10318}???????????????????????????????{??????????????????????@nettun.inf,%msft%;Microsoft????????????????????????????????????FSFilter Infrastructure???????????????????????????????????????????????(?????????p???????????????????? \?????????????????? ????????????????????:????????g????oem7.inf????????????????????????????\H??Microsoft???????????????????????????????*pnp09ff?????????6??Extended base???????????????????????t???????????????????????????wpdbusenum\fs??6_{??????????????t????????????,??????,2??@nettun.inf,%6to4mp.displayname%;Karta Microsoft 6to4???FAT12/16/32 File System Driver??????????????????????????5-22-2011???????????????????????ggsemc??????????????????????????????????????????@netrasa.inf,%mp-pppoe-dispname%;WAN Miniport (PPPOE)???system32\drivers\fltmgr.sys?????@%SystemRoot%\system32\drivers\http
Reg  HKLM\SYSTEM\ControlSet003\services\LanmanServer\Linkage@Export                                                      ????????????????????????\H??Microsoft???????????????????????????????*pnp09ff?????????6??Extended base???????????????????????t???????????????????????????wpdbusenum\fs??6_{??????????????t????????????,??????,2??@nettun.inf,%6to4mp.displayname%;Karta Microsoft 6to4???FAT12/16/32 File System Driver??????????????????????????5-22-2011???????????????????????ggsemc??????????????????????????????????????????@netrasa.inf,%mp-pppoe-dispname%;WAN Miniport (PPPOE)???system32\drivers\fltmgr.sys?????@%SystemRoot%\system32\drivers\http.sys,-1????????6?????????????????System Bus Extender?????????????????????????????????11???&??????pp??????????????????*6to4mp?????oem25.inf???system32\drivers\HTTP.sys????????????o??????????????????????t?????????????????????????????N??????????????????????????????????????e???????????e????????L?????????????????????oem7.inf?????????????B??????????????t???????$???4????? ??????? ??????????????? ??????????? ????????????????????????????????????????? ???????????????????$???4????? ??????? ??????????????? 
Reg  HKLM\SYSTEM\ControlSet003\services\LanmanWorkstation\Linkage@Bind                                                   ??????????:??????E??????ic????\????????????e??????<????????g????Sterownik procesora AMD?????@%systemroot%\system32\drivers\discache.sys,-102????exFAT File System Driver??????b????????????n???????????????????????????????????????????????????s??????????????????????????b????????????n????? ??????????????????????????? ??????????FSFilter Virtualization?????????????????y???????????{4d36e972-e325-11ce-bfc1-08002be10318}\0041?????????????????1.1.9.3??:???????????????????????????0??????? ??????????????????????????????p???????????????Pointer Port?????????????g???E??????????????????????????????????????????????t????????????????d????N??????#?????Dco?????????????????????llt??11???????????????????????i????????????V????????????n?????????????????????????????????????????????????????????????4??{4d36e972-e325-11ce-bfc1-08002be10318}???????????????????????????????{??????????????????????@nettun.inf,%msft%;Microsoft????????????????????????????????????FSFilter Infrastructure???????????????????????????????????????????????(?????????p??
Reg  HKLM\SYSTEM\ControlSet003\services\LanmanWorkstation\Linkage@Route                                                  ????????? \?????????????????? ????????????????????:????????g????oem7.inf????????????????????????????\H??Microsoft???????????????????????????????*pnp09ff?????????6??Extended base???????????????????????t???????????????????????????wpdbusenum\fs??6_{??????????????t????????????,??????,2??@nettun.inf,%6to4mp.displayname%;Karta Microsoft 6to4???FAT12/16/32 File System Driver??????????????????????????5-22-2011???????????????????????ggsemc??????????????????????????????????????????@netrasa.inf,%mp-pppoe-dispname%;WAN Miniport (PPPOE)???system32\drivers\fltmgr.sys?????@%SystemRoot%\system32\drivers\http.sys,-1????????6?????????????????System Bus Extender?????????????????????????????????11???&??????pp??????????????????*6to4mp?????oem25.inf???system32\drivers\HTTP.sys????????????o??????????????????????t?????????????????????????????N??????????????????????????????????????e???????????e????????L?????????????????????oem7.inf?????????????B??????????????t???????$???4????? ??????? ??????????????? ??????????? ????????????????????
Reg  HKLM\SYSTEM\ControlSet003\services\LanmanWorkstation\Linkage@Export                                                 ????????????????????????????{4d36e968-e325-11ce-bfc1-08002be10318}\0000?????????????????????????????????????????????????@%systemroot%\system32\drivers\dfsc.sys,-101??????V????????????e??????<???????????h??????????????????????????????????????????????d??system32\drivers\modem.sys???????????????????????????F??s}??????????Application?????????????????e???????????? ??????????????????????????????????tunnel?"?"??????????????????????????????????M:\?E CARD??????Boot File System??????L????????????e??????????????????????(?????????p???????????????????.NT?dr??disk.inf????????????????????????????????????????????t?????????????????????>????????????e????????????????t?????2????????????n????????????????????????????????????????????oem92.inf????????????v???????G????8???????????h??????????????????????t??s???????????{4824f8d6-15e2-11e1-a9c2-806e6f6e6963}??????????$???4????? ??????? ??????????????????????????????????????????????????????? ??????????? ??????????? ??????????????? ???'???? ??HJ???f???????????????<???<???????????????????
Reg  HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet003\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0xD0 0x45 0x11 0x93 ...

---- EOF - GMER 1.0.15 ----