GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-02-06 18:05:41
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD2500BEKT-60A25T1 rev.02.01A02 232,89GB
Running: kzy5mjym.exe; Driver: C:\Users\oem\AppData\Local\Temp\uxriqpow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Steam\Steam.exe[844] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69                        00000000754e1465 2 bytes [4E, 75]
.text  C:\Program Files (x86)\Steam\Steam.exe[844] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155                       00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                        * 2
.text  C:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3488] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69          00000000754e1465 2 bytes [4E, 75]
.text  C:\Program Files (x86)\Steam\bin\steamwebhelper.exe[3488] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155         00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                        * 2
.text  C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3724] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69   00000000754e1465 2 bytes [4E, 75]
.text  C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3724] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155  00000000754e14bb 2 bytes [4E, 75]
.text  ...                                                                                                                        * 2

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\70f395800ca4                                                
Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\70f395809366                                                
Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\70f395cf64b5                                                
Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e02a8236c7d8                                                
Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\e02a82d11990                                                
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\70f395800ca4 (not active ControlSet)                            
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\70f395809366 (not active ControlSet)                            
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\70f395cf64b5 (not active ControlSet)                            
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e02a8236c7d8 (not active ControlSet)                            
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\e02a82d11990 (not active ControlSet)                            

---- Files - GMER 2.1 ----

File   C:\ProgramData\Microsoft\RAC\Temp\sql6C89.tmp                                                                              20480 bytes
File   C:\ProgramData\Microsoft\RAC\Temp\sql6CB9.tmp                                                                              20480 bytes

---- EOF - GMER 2.1 ----