GMER 1.0.15.15530 - http://www.gmer.net Rootkit scan 2011-01-13 22:47:59 Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 Hitachi_ rev.BBFO Running: o8xzg1v3.exe; Driver: C:\Users\kasia\AppData\Local\Temp\uglcqpoc.sys ---- System - GMER 1.0.15 ---- INT 0x62 ? 858D2F00 INT 0x62 ? 858D2F00 INT 0x72 ? 858D2F00 INT 0x82 ? 858D2F00 INT 0x92 ? 84E1FBF8 INT 0xA2 ? 84481BF8 INT 0xB2 ? 84481BF8 INT 0xB3 ? 858D2F00 ---- Kernel code sections - GMER 1.0.15 ---- ? System32\Drivers\spzu.sys System nie może odnaleźć określonej ścieżki. ! .text USBPORT.SYS!DllUnload 8BFAF46F 5 Bytes JMP 858D24E0 ---- User code sections - GMER 1.0.15 ---- .text C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe[2668] ntdll.dll!DbgBreakPoint 770A7DFE 1 Byte [90] ---- Kernel IAT/EAT - GMER 1.0.15 ---- IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortUchar] [8068D6D6] \SystemRoot\System32\Drivers\spzu.sys IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUchar] [8068D042] \SystemRoot\System32\Drivers\spzu.sys IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortBufferUshort] [8068D800] \SystemRoot\System32\Drivers\spzu.sys IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUshort] [8068D0C0] \SystemRoot\System32\Drivers\spzu.sys IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortBufferUshort] [8068D13E] \SystemRoot\System32\Drivers\spzu.sys IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [8069CB90] \SystemRoot\System32\Drivers\spzu.sys ---- User IAT/EAT - GMER 1.0.15 ---- IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] 00F3F770 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] 00F3FAA0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!ExitProcess] 00F3C020 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetCommandLineA] 00F41030 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CloseHandle] 00F3DB70 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] 00F394C0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] 00F3AA00 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FreeLibrary] 00F3B750 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileType] 00F3DC80 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcessHeap] 00F41020 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DuplicateHandle] 00F3DAD0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFilePointer] 00F3D930 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] 00F3CA70 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!ReadFile] 00F3D200 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] 00F3CEB0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!WriteFile] 00F3D630 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetACP] 00F41040 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetEnvironmentStringsW] 00F3BCF0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] 00F3AD30 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!TerminateProcess] 00F3C120 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetModuleHandleA] 00F3FF60 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateThread] 00F3C270 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcessHeap] 00F41020 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] 00F3FAA0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DuplicateHandle] 00F3DAD0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!IsDebuggerPresent] 00F415A0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateThread] 00F3C270 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] 00F3B400 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetEnvironmentStringsW] 00F3BCF0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SetFilePointer] 00F3D930 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!MapViewOfFileEx] 00F3E560 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileMappingW] 00F3E040 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!MapViewOfFile] 00F3E4E0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!OpenFileMappingW] 00F3F000 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!UnmapViewOfFile] 00F3E6D0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileType] 00F3DC80 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FlushViewOfFile] 00F3E180 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileSize] 00F3DA70 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!WriteFile] 00F3D630 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetACP] 00F41040 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!TerminateProcess] 00F3C120 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GlobalAlloc] 00F3FFC0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GlobalLock] 00F3FEE0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GlobalUnlock] 00F3FEA0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] 00F3CEB0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] 00F3AD30 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CloseHandle] 00F3DB70 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] 00F3AA00 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FreeLibrary] 00F3B750 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress] 00F394C0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!ReadFile] 00F3D200 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetVersion] 00F41010 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [USER32.dll!LoadIconW] 00F412E0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [USER32.dll!LoadCursorW] 00F41280 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [USER32.dll!CreateDialogParamW] 00F414D0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [USER32.dll!DialogBoxParamW] 00F41570 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [USER32.dll!LoadStringW] 00F413A0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueA] 00F40CD0 IAT C:\Program Files\DAP\DAP.exe[620] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] 00F409C0 IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [740F7BA4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [741398C5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [740FD3C8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [740EF527] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [740F7599] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [740EE43D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [7412B33D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [740FD68A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [740F012E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [740F0095] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [740E71F3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [7417D810] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [741175E1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [740EDAE1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree] [740E668F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [740E66BA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\Explorer.EXE[1300] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [740F1E45] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18000_none_9e752e5ac9c619f3\gdiplus.dll (Microsoft GDI+/Microsoft Corporation) IAT C:\Windows\system32\SearchProtocolHost.exe[3724] @ C:\Windows\system32\ole32.dll [USER32.dll!DialogBoxParamW] [6E62DB6B] C:\Windows\AppPatch\AcSpecfc.DLL (Windows Compatibility DLL/Microsoft Corporation) IAT C:\Windows\system32\SearchProtocolHost.exe[3724] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DialogBoxParamW] [6E62DB6B] C:\Windows\AppPatch\AcSpecfc.DLL (Windows Compatibility DLL/Microsoft Corporation) IAT C:\Windows\system32\SearchProtocolHost.exe[3724] @ C:\Windows\system32\SHELL32.dll [USER32.dll!DialogBoxParamW] [6E62DB6B] C:\Windows\AppPatch\AcSpecfc.DLL (Windows Compatibility DLL/Microsoft Corporation) ---- Devices - GMER 1.0.15 ---- Device \FileSystem\Ntfs \Ntfs 84E221F8 Device \FileSystem\fastfat \FatCdrom 845DA1F8 Device \Driver\volmgr \Device\VolMgrControl 844831F8 Device \Driver\usbuhci \Device\USBPDO-0 8646F1F8 Device \Driver\usbuhci \Device\USBPDO-1 8646F1F8 Device \Driver\usbehci \Device\USBPDO-2 8647D1F8 Device \Driver\usbuhci \Device\USBPDO-3 8646F1F8 Device \Driver\netbt \Device\NetBT_Tcpip_{C7A12DEA-FEF2-4DA1-9398-6B13B9508924} 86D39420 Device \Driver\usbuhci \Device\USBPDO-4 8646F1F8 Device \Driver\usbuhci \Device\USBPDO-5 8646F1F8 Device \Driver\usbehci \Device\USBPDO-6 8647D1F8 Device \Driver\volmgr \Device\HarddiskVolume1 844831F8 Device \Driver\volmgr \Device\HarddiskVolume2 844831F8 Device \Driver\cdrom \Device\CdRom0 864841F8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 84E201F8 Device \Driver\iaStor \Device\Ide\iaStor0 [87CB36D0] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\atapi \Device\Ide\IdePort0 84E201F8 Device \Driver\atapi \Device\Ide\IdePort1 84E201F8 Device \Driver\iaStor \Device\Ide\IAAStorageDevice-0 [87CB36D0] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX} Device \Driver\netbt \Device\NetBt_Wins_Export 86D39420 Device \Driver\netbt \Device\NetBT_Tcpip_{76432607-F18B-404E-A278-1A5FD97B677A} 86D39420 Device \Driver\Smb \Device\NetbiosSmb 86D3F488 Device \Driver\iScsiPrt \Device\RaidPort0 864881F8 Device \Driver\usbuhci \Device\USBFDO-0 8646F1F8 Device \Driver\usbuhci \Device\USBFDO-1 8646F1F8 Device \Driver\usbehci \Device\USBFDO-2 8647D1F8 Device \Driver\usbuhci \Device\USBFDO-3 8646F1F8 Device \Driver\usbuhci \Device\USBFDO-4 8646F1F8 Device \Driver\usbuhci \Device\USBFDO-5 8646F1F8 Device \Driver\usbehci \Device\USBFDO-6 8647D1F8 Device \FileSystem\fastfat \Fat 845DA1F8 AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Menedżer filtrów systemu plików firmy Microsoft/Microsoft Corporation) Device \FileSystem\cdfs \Cdfs 80F491F8 ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters@SecurityLevel 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@DibServiceVersion 131072 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@VID 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@PID 49209 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@VIDType 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@COD 5898756 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@Name 0x4B 0x61 0x73 0x69 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c@Store Link Key 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010001 0x35 0x59 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010002 0x35 0x5B 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010003 0x35 0x3F 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010008 0x35 0xC5 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010009 0x35 0x61 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000a 0x35 0x53 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000b 0x35 0x63 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000c 0x35 0x58 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000d 0x35 0x64 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000e 0x36 0x01 0x8B 0x09 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010010 0x35 0x60 0x09 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}@Instance 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@PriLangServiceName 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@DeviceString Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@Enabled 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}@Instance 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@PriLangServiceName 0x53 0x65 0x72 0x69 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@DeviceString Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@Enabled 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}@Instance 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@PriLangServiceName 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@DeviceString Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@Enabled 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}@Instance 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@PriLangServiceName 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@DeviceString Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@Enabled 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\00210996c808 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\00210996c808@DibServiceVersion 131072 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\00210996c808@COD 5898756 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\00210996c808@Name 0x2E 0x2E 0x3A 0x3A ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\0021fbf89aca (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\0021fbf89aca@DibServiceVersion 131072 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\0021fbf89aca@COD 5898756 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Devices\0021fbf89aca@Name 0x4A 0x61 0x79 0x00 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys\00037a8fcb90 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys\00037a8fcb90@001d28bd067c 0x30 0x67 0x5A 0xB5 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys\00037a8fcb90@0021fbf89aca 0x0E 0x60 0x65 0x4E ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Keys\00037a8fcb90@00210996c808 0x73 0xA7 0x94 0x9F ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}@PnpInstanceCounter 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@Enabled 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@ServiceName Kasiulek:-P Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@DeviceString ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????USB\VID_0930&PID_0508\5&16b1b7ee&0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@AssocBdAddr 0x7C 0x06 0xBD 0x28 ... Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@PnpInstance 0 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PerDevices (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PerDevices@ Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PerDevices\00037a8fcb90 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PnpId (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PnpId@RFCOMM MS_RFCOMM Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PnpId@BTHBRB MS_BTHBRB Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\PnpId@BTHPAN MS_BTHPAN Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 10 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 10@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 20 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 20@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 30 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 30@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 06 Minor 20 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Restrictions\COD Major 06 Minor 20@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\ServiceGroups (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\ServiceGroups@MonoAudio {0000111e-0000-1000-8000-00805f9b34fb}?{00001108-0000-1000-8000-00805f9b34fb}? Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{00001000-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{00001000-0000-1000-8000-00805f9b34fb}@SecurityFlags 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{00001105-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{00001105-0000-1000-8000-00805f9b34fb}@SecurityFlags 2 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{00001115-0000-1000-8000-00805f9b34fb} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{00001115-0000-1000-8000-00805f9b34fb}@SecurityFlags 2 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{0350278f-3dca-4e62-831d-a41165ff906c} (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\Services\{0350278f-3dca-4e62-831d-a41165ff906c}@SecurityFlags 2 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\SupportedServices (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\SupportedServices@{00001124-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\SupportedServices@{00001126-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\SupportedServices@{00001103-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\SupportedServices@{00001101-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices (not active ControlSet) Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001200-0000-1000-8000-00805F9B34FB} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001000-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001001-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001002-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001115-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001105-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001106-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001107-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001116-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001117-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{0000110a-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{0000110C-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001112-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{0000111f-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001104-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{0000112d-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{0000112e-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{0000112f-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\ControlSet001\Services\BTHPORT\Parameters\UnsupportedServices@{00001111-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters@SecurityLevel 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@DibServiceVersion 131072 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@VID 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@PID 49209 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@VIDType 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@COD 5898756 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@Name 0x4B 0x61 0x73 0x69 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c@Store Link Key 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010001 0x35 0x59 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010002 0x35 0x5B 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010003 0x35 0x3F 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010008 0x35 0xC5 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010009 0x35 0x61 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000a 0x35 0x53 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000b 0x35 0x63 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000c 0x35 0x58 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000d 0x35 0x64 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@0001000e 0x36 0x01 0x8B 0x09 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\CachedServices@00010010 0x35 0x60 0x09 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}@Instance 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@PriLangServiceName 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@DeviceString Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00000002-0000-1000-8000-0002ee000002}\C00000000@Enabled 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}@Instance 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@PriLangServiceName 0x53 0x65 0x72 0x69 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@DeviceString Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001101-0000-1000-8000-00805f9b34fb}\C00000000@Enabled 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}@Instance 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@PriLangServiceName 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@DeviceString Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001103-0000-1000-8000-00805f9b34fb}\C00000000@Enabled 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}@Instance 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@PriLangServiceName 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@DeviceString Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@CounterInstanceId 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\001d28bd067c\ServicesFor00037a8fcb90\{00001124-0000-1000-8000-00805f9b34fb}\C00000000@Enabled 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\00210996c808 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\00210996c808@DibServiceVersion 131072 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\00210996c808@COD 5898756 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\00210996c808@Name 0x2E 0x2E 0x3A 0x3A ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\0021fbf89aca Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\0021fbf89aca@DibServiceVersion 131072 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\0021fbf89aca@COD 5898756 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices\0021fbf89aca@Name 0x4A 0x61 0x79 0x00 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00037a8fcb90 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00037a8fcb90@001d28bd067c 0x30 0x67 0x5A 0xB5 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00037a8fcb90@0021fbf89aca 0x0E 0x60 0x65 0x4E ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00037a8fcb90@00210996c808 0x73 0xA7 0x94 0x9F ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}@PnpInstanceCounter 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@Enabled 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@ServiceName Kasiulek:-P Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@DeviceString ??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????USB\VID_0930&PID_0508\5&16b1b7ee&0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@AssocBdAddr 0x7C 0x06 0xBD 0x28 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\LocalServices\{00001101-0000-1000-8000-00805f9b34fb}\0@PnpInstance 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PerDevices Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PerDevices@ Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PerDevices\00037a8fcb90 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PnpId Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PnpId@RFCOMM MS_RFCOMM Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PnpId@BTHBRB MS_BTHBRB Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\PnpId@BTHPAN MS_BTHPAN Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 10 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 10@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 20 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 20@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 30 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 05 Minor 30@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 06 Minor 20 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Restrictions\COD Major 06 Minor 20@DontAddIncomingSPPInWizard 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\ServiceGroups Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\ServiceGroups@MonoAudio {0000111e-0000-1000-8000-00805f9b34fb}?{00001108-0000-1000-8000-00805f9b34fb}? Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{00001000-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{00001000-0000-1000-8000-00805f9b34fb}@SecurityFlags 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{00001105-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{00001105-0000-1000-8000-00805f9b34fb}@SecurityFlags 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{00001115-0000-1000-8000-00805f9b34fb} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{00001115-0000-1000-8000-00805f9b34fb}@SecurityFlags 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{0350278f-3dca-4e62-831d-a41165ff906c} Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Services\{0350278f-3dca-4e62-831d-a41165ff906c}@SecurityFlags 2 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\SupportedServices Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\SupportedServices@{00001124-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\SupportedServices@{00001126-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\SupportedServices@{00001103-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\SupportedServices@{00001101-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001200-0000-1000-8000-00805F9B34FB} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001000-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001001-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001002-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001115-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001105-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001106-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001107-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001116-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001117-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{0000110a-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{0000110C-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001112-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{0000111f-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001104-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{0000112d-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{0000112e-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{0000112f-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\UnsupportedServices@{00001111-0000-1000-8000-00805f9b34fb} 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x2C 0xB6 0x44 0xA2 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 ---- EOF - GMER 1.0.15 ----