GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-04-25 13:46:46
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 ST9500420ASG rev.0002SDM1
Running: ku826qrx.exe; Driver: C:\Users\Monika\AppData\Local\Temp\uwdiypod.sys


---- User code sections - GMER 1.0.15 ----

.text   C:\Program Files\Mozilla Firefox\plugin-container.exe[800] USER32.dll!GetWindowInfo                  7733428E 5 Bytes  JMP 6AE6FE0A C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text   C:\Program Files\Mozilla Firefox\plugin-container.exe[800] USER32.dll!TrackPopupMenu                 773414F3 5 Bytes  JMP 6AE703C5 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text   C:\Program Files\Mozilla Firefox\firefox.exe[3008] ntdll.dll!LdrLoadDll                              77719378 5 Bytes  JMP 6ACF9720 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text   C:\Program Files\Mozilla Firefox\firefox.exe[3008] kernel32.dll!MapViewOfFile                        76216B10 5 Bytes  JMP 6AF2E1F4 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text   C:\Program Files\Mozilla Firefox\firefox.exe[3008] kernel32.dll!VirtualAlloc                         7621AF75 5 Bytes  JMP 6AF2E21B C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text   C:\Program Files\Mozilla Firefox\firefox.exe[3008] USER32.dll!GetWindowInfo                          7733428E 5 Bytes  JMP 6AE77657 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text   C:\Program Files\Mozilla Firefox\firefox.exe[3008] GDI32.dll!CreateDIBSection                        776A7461 5 Bytes  JMP 6AF2E17E C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- User IAT/EAT - GMER 1.0.15 ----

IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                [74397817] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                 [743EA86D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]             [7439BB22] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]       [7438F695] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                 [743975E9] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]              [7438E7CA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM]  [743C8395] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream]     [7439DA60] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]             [7438FFFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]              [7438FF61] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]               [743871CF] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM]       [7441CAE2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile]          [743BC8D8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]             [7438D968] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                       [74386853] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                      [7438687E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT     C:\Windows\Explorer.EXE[2820] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]         [74392AD1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

Device  \Driver\BTHUSB \Device\00000078                                                                      bthport.sys (Sterownik magistrali Bluetooth/Microsoft Corporation)
Device  \Driver\BTHUSB \Device\0000007a                                                                      bthport.sys (Sterownik magistrali Bluetooth/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001e37bdb835                          
Reg     HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001e37bdb835 (not active ControlSet)      

---- EOF - GMER 1.0.15 ----