GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-09-06 23:52:25 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T0L0-0 ST1000LM024_HN-M101MBB rev.2AR10002 931,51GB Running: 80fn74p9.exe; Driver: C:\Users\PATRYK\AppData\Local\Temp\pwliifod.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files\AVAST Software\Avast\avastui.exe[2872] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000076ac8769 8 bytes [31, C0, C2, 04, 00, 90, 90, ...] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[4188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075721465 2 bytes [72, 75] .text C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[4188] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757214bb 2 bytes [72, 75] .text ... * 2 .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1980] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075721465 2 bytes [72, 75] .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1980] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000757214bb 2 bytes [72, 75] .text ... * 2 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\c8f733848478 Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{5393AD2D-DBA3-4677-927F-B1CAD987F1DB}@LeaseObtainedTime 1441572343 Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{5393AD2D-DBA3-4677-927F-B1CAD987F1DB}@T1 1441575943 Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{5393AD2D-DBA3-4677-927F-B1CAD987F1DB}@T2 1441578643 Reg HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{5393AD2D-DBA3-4677-927F-B1CAD987F1DB}@LeaseTerminatesTime 1441579543 Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\c8f733848478 (not active ControlSet) ---- EOF - GMER 2.1 ----