GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-04-24 20:26:49
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 MAXTOR_STM3160215A rev.3.AAC 149,05GB
Running: 9hs1vve3.exe; Driver: C:\Users\AEM\AppData\Local\Temp\uwldrpow.sys


---- User code sections - GMER 2.1 ----

.text   C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[1748] C:\Windows\SysWOW64\ntdll.dll!NtQueryValueKey         000000007711faa8 5 bytes JMP 00000001727619e8
.text   C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[1748] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory  0000000077120038 5 bytes JMP 000000017276209e
.text   C:\Program Files (x86)\BrowseMark\bin\utilBrowseMark.exe[3448] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69             0000000076b91465 2 bytes [B9, 76]
.text   C:\Program Files (x86)\BrowseMark\bin\utilBrowseMark.exe[3448] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155            0000000076b914bb 2 bytes [B9, 76]
.text   ...                                                                                                                                * 2
.text   C:\Users\AEM\AppData\Roaming\uTorrent\uTorrent.exe[2772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                   0000000076b91465 2 bytes [B9, 76]
.text   C:\Users\AEM\AppData\Roaming\uTorrent\uTorrent.exe[2772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                  0000000076b914bb 2 bytes [B9, 76]
.text   ...                                                                                                                                * 2

---- Kernel IAT/EAT - GMER 2.1 ----

IAT     C:\Windows\System32\win32k.sys[ntoskrnl.exe!KeUserModeCallback]                                                                    [fffff880021d6ea4] \SystemRoot\system32\DRIVERS\klif.sys [PAGE]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [1996:516]                                                              0000000076ad7587
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [1996:1916]                                                             0000000065647712
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [1996:2208]                                                             0000000077152e65
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [1996:3264]                                                             0000000077153e85
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [1996:4692]                                                             0000000077153e85
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [1996:1328]                                                             0000000077153e85
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1196:2212]                                                                     000007fefb132a7c
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1196:2220]                                                                     000007fef5014830
Thread  C:\Program Files\Windows Media Player\wmpnetwk.exe [1196:3180]                                                                     000007fef8715124

---- EOF - GMER 2.1 ----