GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2015-11-21 11:47:30 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD16 rev.11.0 149,05GB Running: cdjkbr32.exe; Driver: C:\Users\Andrzej\AppData\Local\Temp\ufldypoc.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\WordFly_1.10.0.28\Service\wfsrvc.exe[1660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076151465 2 bytes [15, 76] .text C:\Program Files (x86)\WordFly_1.10.0.28\Service\wfsrvc.exe[1660] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000761514bb 2 bytes [15, 76] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Windows\System32\svchost.exe [3896:2064] 000007fef5f39688 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00242cb5028c Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00242cb5028c (not active ControlSet) ---- EOF - GMER 2.1 ----