GMER 2.1.19163 - http://www.gmer.net Rootkit scan 2013-04-27 17:48:00 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 OCZ-VERTEX4 rev.1.5 119,24GB Running: euuvwbr7.exe; Driver: C:\Users\Draco\AppData\Local\Temp\pxldqpob.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076c81465 2 bytes [C8, 76] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3792] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076c814bb 2 bytes [C8, 76] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Windows\System32\svchost.exe [4496:4676] 000007fef40f9688 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\5891cf06a62a Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\5891cf06a62a@0016209b6d0b 0x53 0x4F 0x49 0x8E ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\5891cf06a62a@d488905d5305 0xD7 0x07 0x4B 0xBE ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\5891cf06a62a (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\5891cf06a62a@0016209b6d0b 0x53 0x4F 0x49 0x8E ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\5891cf06a62a@d488905d5305 0xD7 0x07 0x4B 0xBE ... ---- EOF - GMER 2.1 ----