GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-03-22 01:25:19
Windows 5.1.2600 Dodatek Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Hitachi_HTS543225L9A300 rev.FBEOC40C
Running: zjsps5il.exe; Driver: C:\DOCUME~1\Piotr\USTAWI~1\Temp\kwlcrpog.sys


---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\Explorer.EXE [KERNEL32.dll!GetProcAddress]                              [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress]                       [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]                     [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress]                       [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\Secur32.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]                        [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\USER32.dll [KERNEL32.dll!GetProcAddress]                       [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\ole32.dll [KERNEL32.dll!GetProcAddress]                        [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress]                     [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\WININET.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\USERENV.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress]                       [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress]                      [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT             C:\WINNT\Explorer.EXE[1636] @ C:\WINNT\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress]                     [5CFE7774] C:\WINNT\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                      aswRdr.SYS (avast! TDI RDR Driver/AVAST Software)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04                               
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0                            C:\Program Files\Alcohol Soft\Alcohol 120\
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0                            0
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew                         0x3E 0xDD 0xDD 0x18 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001                      
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0                   0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)           
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0                                C:\Program Files\Alcohol Soft\Alcohol 120\
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0                                0
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew                             0x3E 0xDD 0xDD 0x18 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0                       0x20 0x01 0x00 0x00 ...

---- EOF - GMER 1.0.15 ----