GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2015-12-21 17:15:27
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000065 ATA_____ rev.0002 931,51GB
Running: GMERijkjzcir.exe; Driver: C:\Users\Admin\AppData\Local\Temp\uwddakob.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe[1672] C:\Windows\SysWOW64\ntdll.dll!NtQueryValueKey         000000007757fae8 5 bytes JMP 00000001739d19e8
.text  C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe[1672] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory  0000000077580078 5 bytes JMP 00000001739d209e

---- Kernel IAT/EAT - GMER 2.1 ----

IAT    C:\Windows\System32\win32k.sys[ntoskrnl.exe!KeUserModeCallback]                                                                           [fffff8800330bedc] \SystemRoot\system32\DRIVERS\klif.sys [PAGE]

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0cd2925abc6f                                                               
Reg    HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0cd2925abc6f (not active ControlSet)                                           

---- EOF - GMER 2.1 ----