GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-03-30 21:09:21
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS542525K9SA00 rev.BBFOC31P
Running: gmer.exe; Driver: C:\Users\Radzio\AppData\Local\Temp\pxdiqpow.sys


---- User code sections - GMER 1.0.15 ----

.text   C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe[3296] USER32.dll!InSendMessageEx + 4C9           769BE7C8 7 Bytes  JMP 009D3460 C:\Program Files\Sony\Sony PC Companion\NewUI.dll (New UI/Avanquest Software)
.text   C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe[3296] USER32.dll!CreateIconFromResourceEx + 340  769C0E45 7 Bytes  JMP 009D3310 C:\Program Files\Sony\Sony PC Companion\NewUI.dll (New UI/Avanquest Software)
.text   C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe[3296] USER32.dll!DdeQueryStringW + 5CE           769DFA2D 7 Bytes  JMP 009D3440 C:\Program Files\Sony\Sony PC Companion\NewUI.dll (New UI/Avanquest Software)
.text   C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe[3296] USER32.dll!MessageBoxIndirectA + F5        76A0D5CE 7 Bytes  JMP 009D34B0 C:\Program Files\Sony\Sony PC Companion\NewUI.dll (New UI/Avanquest Software)
.text   C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe[3296] USER32.dll!MessageBoxIndirectW + 61        76A0D634 7 Bytes  JMP 009D3580 C:\Program Files\Sony\Sony PC Companion\NewUI.dll (New UI/Avanquest Software)
.text   C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe[3296] USER32.dll!MessageBoxExA + 1F              76A0D658 7 Bytes  JMP 009D3530 C:\Program Files\Sony\Sony PC Companion\NewUI.dll (New UI/Avanquest Software)

---- User IAT/EAT - GMER 1.0.15 ----

IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                    [74AC7817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                     [74B1A86D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]                 [74ACBB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]           [74ABF695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                     [74AC75E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]                  [74ABE7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM]      [74AF8395] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream]         [74ACDA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]                 [74ABFFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]                  [74ABFF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]                   [74AB71CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM]           [74B4CAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile]              [74AEC8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]                 [74ABD968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                           [74AB6853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                          [74AB687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2036] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]             [74AC2AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

Device  \Driver\BTHUSB \Device\0000006d                                                                          bthport.sys (Sterownik magistrali Bluetooth/Microsoft Corporation)
Device  \Driver\BTHUSB \Device\0000006d                                                                          bthport.sys (Sterownik magistrali Bluetooth/Microsoft Corporation)
Device  \Driver\BTHUSB \Device\0000006f                                                                          bthport.sys (Sterownik magistrali Bluetooth/Microsoft Corporation)
Device  \Driver\BTHUSB \Device\0000006f                                                                          bthport.sys (Sterownik magistrali Bluetooth/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0030914011e4                              
Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0030914011e4@58170cf4cebe                 0x8E 0x5A 0x28 0xD9 ...
Reg     HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\0030914011e4 (not active ControlSet)          
Reg     HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\0030914011e4@58170cf4cebe                     0x8E 0x5A 0x28 0xD9 ...

---- EOF - GMER 1.0.15 ----