GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-12-14 17:28:42 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000065 ST1000LM rev.2AR2 931,51GB Running: ez4uls9o.exe; Driver: C:\Users\Jadzia\AppData\Local\Temp\awrdipob.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Skype\Phone\Skype.exe[1844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076541465 2 bytes [54, 76] .text C:\Program Files (x86)\Skype\Phone\Skype.exe[1844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000765414bb 2 bytes [54, 76] .text ... * 2 .text C:\Program Files (x86)\Skype\Phone\Skype.exe[1844] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35 00000000717211a8 2 bytes [72, 71] .text C:\Program Files (x86)\Skype\Phone\Skype.exe[1844] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21 00000000717213a8 2 bytes [72, 71] .text C:\Program Files (x86)\Skype\Phone\Skype.exe[1844] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21 0000000071721422 2 bytes [72, 71] .text C:\Program Files (x86)\Skype\Phone\Skype.exe[1844] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19 0000000071721498 2 bytes [72, 71] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076541465 2 bytes [54, 76] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3652] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000765414bb 2 bytes [54, 76] .text ... * 2 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\381b4222-f694-41f0-9685-ff5bb260df2e\54533251-82be-4824-96c1-47b60b740d00\bc5038f7-23e0-4960-96da-33abaf5935ec@DCSettingIndex 70 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0cd292afb5c6 Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0cd292afb5c6 (not active ControlSet) ---- EOF - GMER 2.1 ----