GMER 2.1.19163 - http://www.gmer.net Rootkit scan 2014-11-29 14:45:07 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.PC4O 465,76GB Running: m57g1hli.exe; Driver: C:\Users\Ola\AppData\Local\Temp\fxldapow.sys ---- Kernel code sections - GMER 2.1 ---- .text C:\Windows\System32\win32k.sys!W32pServiceTable fffff96000144300 7 bytes [00, A1, F3, FF, 41, B4, F0] .text C:\Windows\System32\win32k.sys!W32pServiceTable + 8 fffff96000144308 3 bytes [00, 07, 02] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\AVG\AVG2015\avgui.exe[2308] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000769b1465 2 bytes [9B, 76] .text C:\Program Files (x86)\AVG\AVG2015\avgui.exe[2308] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000769b14bb 2 bytes [9B, 76] .text ... * 2 .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000769b1465 2 bytes [9B, 76] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[5076] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000769b14bb 2 bytes [9B, 76] .text ... * 2 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc7737dc2d40 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc7737dc2d40@8844f68ad283 0x4D 0x23 0x51 0x0B ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc7737dc2d40@681729cb4d31 0x16 0x35 0x67 0x2A ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc7737dc2d40 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc7737dc2d40@8844f68ad283 0x4D 0x23 0x51 0x0B ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc7737dc2d40@681729cb4d31 0x16 0x35 0x67 0x2A ... ---- Files - GMER 2.1 ---- File C:\Users\Ola\AppData\Local\Opera Software\Opera Stable\Cache\f_000074 17640 bytes File C:\Users\Ola\AppData\Roaming\Opera Software\Opera Stable\lockfile 0 bytes ---- EOF - GMER 2.1 ----