GMER 1.0.15.15641 - http://www.gmer.net Rootkit scan 2012-02-16 21:03:22 Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 WDC_WD25 rev.01.0 Running: dgicrgqc.exe; Driver: C:\DOCUME~1\User\USTAWI~1\Temp\pxtcqkob.sys ---- Devices - GMER 1.0.15 ---- AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x33 0x82 0xEA 0x6F ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 D:\programy\deamon\DAEMON Tools Lite\ Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x1E 0x4D 0xBB 0xA9 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x0C 0x53 0x6D 0x52 ... Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x18 0x59 0x27 0xD2 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x33 0x82 0xEA 0x6F ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 D:\programy\deamon\DAEMON Tools Lite\ Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0 Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x1E 0x4D 0xBB 0xA9 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x0C 0x53 0x6D 0x52 ... Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x18 0x59 0x27 0xD2 ... Reg HKLM\SOFTWARE\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}@scansk 0x69 0xB4 0x41 0xA8 ... Reg HKLM\SOFTWARE\Classes\CLSID\{c712bc2c-e826-4f1a-a878-4f5b5f2f39da}@Model 216 Reg HKLM\SOFTWARE\Classes\CLSID\{c712bc2c-e826-4f1a-a878-4f5b5f2f39da}@Therad 30 Reg HKLM\SOFTWARE\Classes\CLSID\{c712bc2c-e826-4f1a-a878-4f5b5f2f39da}@MData 0x2B 0x8F 0x78 0x29 ... ---- Files - GMER 1.0.15 ---- File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\7KJZAE6A\sggw.tv.\wp-content 0 bytes File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\7KJZAE6A\sggw.tv.\wp-content\plugins 0 bytes File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\7KJZAE6A\sggw.tv.\wp-content\plugins\hana-flv-player 0 bytes File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\7KJZAE6A\sggw.tv.\wp-content\plugins\hana-flv-player\flowplayer3 0 bytes File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\7KJZAE6A\sggw.tv.\wp-content\plugins\hana-flv-player\flowplayer3\flowplayer-3.1.1.swf 0 bytes File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\#SharedObjects\7KJZAE6A\sggw.tv.\wp-content\plugins\hana-flv-player\flowplayer3\flowplayer-3.1.1.swf\org.flowplayer.sol 67 bytes File C:\Documents and Settings\User\Dane aplikacji\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#sggw.tv.\settings.sol 78 bytes ---- EOF - GMER 1.0.15 ----